centos7支持https

centos7支持https

1. 安装mod_ssl

sudo yum install -y mod_ssl

2. 创建CA目录并将证书和私钥文件存放到该目录

sudo mkdir /etc/httpd/ca
#假设证书和私钥所在目录为~
#证书名：server.crt 私钥名：server.key
sudo mv ~/server.key /etc/httpd/ca/
sudo mv ~/server.crt /etc/httpd/ca/

3. 修改配置文件/etc/httpd/conf.d/ssl.conf

sudo vim /etc/httpd/conf.d/ssl.conf
#以下为修改内容
去除59，60，92，93行注释
#DocumentRoot "/var/www/html"
#ServerName www.example.com:443		
#SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5
#SSLHonorCipherOrder on
修改100， 107行证书相关信息
SSLCertificateFile /etc/httpd/ca/server.crt
SSLCertificateKeyFile /etc/httpd/ca/server.key