ssl.conf 基本設定

首先我們先編輯ssl.con , 以centos6x  他會在  /etc/httpd/conf.d/ssl.conf

 

#
LoadModule ssl_module modules/mod_ssl.so

Listen 443

#   terminal dialog) has to provide the pass phrase on stdout.
SSLPassPhraseDialog  builtin
#   Inter-Process Session Cache:
SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout  300

SSLMutex default

SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin

SSLCryptoDevice builtin

#<VirtualHost _default_:443>
<VirtualHost *:443>
ServerName 你的domainName:443
DocumentRoot "/home/www":
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/httpd/conf/certificate.crt
SSLCertificateKeyFile /etc/httpd/conf/private.key
SSLCertificateChainFile /etc/httpd/conf/ca_bundle.crt

<Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
##########################

 

wq後

 

restart httpd