HTTPS的配置

準備

假設CentOS7 已經安裝了Apache Web伺服器.

 yum install mod_ssl openssl

安裝完畢後，會自動生成 /etc/httpd/conf.d/ssl.conf 檔案

然後就是相關的證書要準備好

這裡用的是騰訊雲免費的TrustAsia的SSL證書，解壓後取Apache的證書傳至伺服器。

上傳至伺服器後，接下來配置Apache
配置Apache Web伺服器

首先，修改下面的配置檔案。只需要需配置紅色部分 SSLCertificateFile 和 SSLCertificateKeyFile，把目錄換成你所對應的上傳證書的目錄

# vim /etc/httpd/conf.d/ssl.conf

#
# When we also provide SSL we have to listen to the
# the HTTPS port in addition.
#
Listen 443 https

##
## SSL Virtual Host Context
##

# General setup for the virtual host, inherited from global configuration

DocumentRoot “/var/www/html/a.com”
ServerName www.a.com:443

### overwrite the following parameters ###

SSLCertificateFile /etc/pki/tls/certs/server.crt
SSLCertificateKeyFile /etc/pki/tls/private/server.key

### The following parameter does not need to be modified in case of a self-signed certificate. ###
### If you are using a real certificate, you may receive a certificate bundle. The bundle is added using the following parameters ###
SSLCertificateChainFile /etc/pki/tls/certs/example.com.ca-bundle

然後，重新啟動httpd服務使更改生效

 systemctl restart httpd

Web伺服器現在就可以使用HTTPS啦