準備憑證檔案
- your_domain.crt - SSL憑證
- intermediate.crt - 中繼憑證
- your_domain.key - 私鑰
檔案放置
/etc/ssl/certs/your_domain.crt\n/etc/ssl/certs/intermediate.crt\n/etc/ssl/private/your_domain.key\n\nchmod 644 /etc/ssl/certs/*.crt\nchmod 600 /etc/ssl/private/*.key
Apache設定
\n ServerName www.example.com\n DocumentRoot /var/www/html\n \n SSLEngine on\n SSLCertificateFile /etc/ssl/certs/your_domain.crt\n SSLCertificateKeyFile /etc/ssl/private/your_domain.key\n SSLCertificateChainFile /etc/ssl/certs/intermediate.crt\n \n SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1\n SSLCipherSuite HIGH:!aNULL:!MD5\n\n\n\n ServerName www.example.com\n Redirect permanent / https://www.example.com/\n
啟用與測試
sudo a2enmod ssl\nsudo apachectl configtest\nsudo systemctl restart apache2