配置debian下的apache2+ssl的步骤

配置debian下的apache2+ssl的步骤

由高人[google:debian apache2-ssl]指点，经过尝试，于昨晚23:58完成，请指正。

由高人[google:debian apache2-ssl]指点，经过尝试，于昨晚23:58完成，请指正。

Apach2 + ssl Step by Step
-------------------------------------------------
daizhong@gmail.com
20041114 23:35
------------------------------------------------

1 apt-get install apache2-mpm-worker
2 cd /etc/apache2/mods-enabled
ln -s /etc/apache2/mods-available/ssl.* .
3 cd /etc/apache2/sites-available
cp default ssl
cd /etc/apache2/sites-enabled
ln -s /etc/apache2/sites-available/ssl .
Then, modify ssl by the /usr/share/apache2/config/default-443,
paste the follow lines into /etc/apache2/sites-available/ssl:
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/apache.pem
#xxx.xxx.com-ssl.crt
SSLCertificateKeyFile /etc/apache2/ssl/apache.pem
#xxx.xxx.com-ssl.key
BrowserMatch "MSIE [1-4]" nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0
BrowserMatch "MSIE [5-9]" ssl-unclean-shutdown
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

-- If you have several VHOSTS, you can use seperate Sa file as
xxx.xxx.com-ssl.key, etc

4 modify the 2 files:
/etc/apache2/ports.conf -- append "Listen 443"
/etc/apache2/sites-enabled/ssl -- the top 2 lines change to:
NameVirtualHost *:443
<VirtualHost *:443>

5 run apache2-ssl-certification, create the Sa file:
/etc/apache2/ssl/apache.pem

6 /etc/init.d/apache2 restart