{"id":36290,"date":"2023-09-19T01:51:44","date_gmt":"2023-01-22T23:46:58","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/"},"modified":"2024-01-15T08:50:11","modified_gmt":"2024-01-15T00:50:11","slug":"apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/","title":{"rendered":"Apache\u7684SSL\u914d\u7f6e"},"content":{"rendered":"<h1>\u521b\u5efa\u8bc1\u4e66<\/h1>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>openssl genrsa <span class=\"nt\">-out<\/span> server.key 2048\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>openssl req <span class=\"nt\">-new<\/span> <span class=\"nt\">-days<\/span> 365 <span class=\"nt\">-key<\/span> server.key <span class=\"nt\">-out<\/span> server.csr\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>openssl x509 <span class=\"nt\">-in<\/span> server.csr <span class=\"nt\">-out<\/span> server.crt <span class=\"nt\">-req<\/span> <span class=\"nt\">-signkey<\/span> server.key <span class=\"nt\">-days<\/span> 365\r\n<\/code><\/pre>\n<h2>\u4f7f\u7528mkcert\u521b\u5efa\u8bc1\u4e66\u3002<\/h2>\n<p>mkcert \u662f\u4e00\u6b3e\u7528\u4e8e\u5728\u672c\u5730\u521b\u5efa\u548c\u7ba1\u7406\u672c\u5730 HTTPS \u5f00\u53d1\u8bc1\u4e66\u7684\u5de5\u5177\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>brew <span class=\"nb\">install <\/span>mkcert\r\n<span class=\"nv\">$ <\/span>brew <span class=\"nb\">install <\/span>nss\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>mkcert <span class=\"nt\">-key-file<\/span> server.key <span class=\"nt\">-cert-file<\/span> server.crt localhost\r\n<\/code><\/pre>\n<h1>Apache\u7684\u8bbe\u7f6e\u3002<\/h1>\n<p>Apache2.4.41 \u53ef\u5c06\u5176\u6539\u5199\u4e3a &#8220;Apache \u7248\u672c\u53f7\u4e3a 2.4.41&#8243;\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"n\">LoadModule<\/span> <span class=\"n\">ssl_module<\/span> <span class=\"n\">libexec<\/span>\/<span class=\"n\">apache2<\/span>\/<span class=\"n\">mod_ssl<\/span>.<span class=\"n\">so<\/span>\r\n<span class=\"n\">LoadModule<\/span> <span class=\"n\">socache_shmcb_module<\/span> <span class=\"n\">libexec<\/span>\/<span class=\"n\">apache2<\/span>\/<span class=\"n\">mod_socache_shmcb<\/span>.<span class=\"n\">so<\/span>\r\n\r\n<span class=\"n\">Include<\/span> \/<span class=\"n\">private<\/span>\/<span class=\"n\">etc<\/span>\/<span class=\"n\">apache2<\/span>\/<span class=\"n\">extra<\/span>\/<span class=\"n\">httpd<\/span>-<span class=\"n\">ssl<\/span>.<span class=\"n\">conf<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"n\">SSLCertificateFile<\/span> <span class=\"s2\">\"\/private\/etc\/apache2\/server.crt\"<\/span>\r\n<span class=\"n\">SSLCertificateKeyFile<\/span> <span class=\"s2\">\"\/private\/etc\/apache2\/server.key\"<\/span>\r\n<\/code><\/pre>\n<p>\u5c06\u5df2\u7b7e\u540d\u7684\u8bc1\u4e66\uff08server.crt\uff09\u548cRSA\u79c1\u94a5\uff08server.key\uff09\u653e\u7f6e\u5728\/private\/etc\/apache2\u76ee\u5f55\u4e0b\u4f5c\u4e3a\u8bc1\u660e\u3002<\/p>\n<h2>\u5c06HTTP\u91cd\u5b9a\u5411\u5230HTTPS<\/h2>\n<pre class=\"post-pre\"><code><span class=\"n\">LoadModule<\/span> <span class=\"n\">rewrite_module<\/span> <span class=\"n\">libexec<\/span>\/<span class=\"n\">apache2<\/span>\/<span class=\"n\">mod_rewrite<\/span>.<span class=\"n\">so<\/span>\r\n\r\n<span class=\"c\"># Redirect http to https\r\n<\/span><span class=\"n\">RewriteEngine<\/span> <span class=\"n\">On<\/span>\r\n<span class=\"n\">RewriteCond<\/span> %{<span class=\"n\">REQUEST_FILENAME<\/span>} -<span class=\"n\">f<\/span> [<span class=\"n\">OR<\/span>]\r\n<span class=\"n\">RewriteCond<\/span> %{<span class=\"n\">REQUEST_FILENAME<\/span>} -<span class=\"n\">d<\/span>\r\n<span class=\"n\">RewriteCond<\/span> %{<span class=\"n\">SERVER_PORT<\/span>} !^<span class=\"m\">443<\/span>$\r\n<span class=\"n\">RewriteRule<\/span> ^.*$ <span class=\"n\">https<\/span>:\/\/%{<span class=\"n\">SERVER_NAME<\/span>}%{<span class=\"n\">REQUEST_URI<\/span>} [<span class=\"n\">R<\/span>=<span class=\"m\">301<\/span>,<span class=\"n\">L<\/span>]\r\n<\/code><\/pre>\n<h1>\u542f\u52a8apache<\/h1>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>apachectl configtest\r\nSyntax OK\r\n\r\n<span class=\"nv\">$ <\/span>apachectl start\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u521b\u5efa\u8bc1\u4e66 $ openssl genrsa -out server.key 2048 $ openssl re [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-36290","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Apache\u7684SSL\u914d\u7f6e - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/apache\u7684ssl\u914d\u7f6e\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Apache\u7684SSL\u914d\u7f6e\" \/>\n<meta property=\"og:description\" content=\"\u521b\u5efa\u8bc1\u4e66 $ openssl genrsa -out server.key 2048 $ openssl re [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/apache\u7684ssl\u914d\u7f6e\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-22T23:46:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-15T00:50:11+00:00\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/\",\"name\":\"Apache\u7684SSL\u914d\u7f6e - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-01-22T23:46:58+00:00\",\"dateModified\":\"2024-01-15T00:50:11+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Apache\u7684SSL\u914d\u7f6e\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Apache\u7684SSL\u914d\u7f6e - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/apache\u7684ssl\u914d\u7f6e\/","og_locale":"zh_CN","og_type":"article","og_title":"Apache\u7684SSL\u914d\u7f6e","og_description":"\u521b\u5efa\u8bc1\u4e66 $ openssl genrsa -out server.key 2048 $ openssl re [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/apache\u7684ssl\u914d\u7f6e\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-01-22T23:46:58+00:00","article_modified_time":"2024-01-15T00:50:11+00:00","author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/","name":"Apache\u7684SSL\u914d\u7f6e - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-01-22T23:46:58+00:00","dateModified":"2024-01-15T00:50:11+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"Apache\u7684SSL\u914d\u7f6e"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/apache%e7%9a%84ssl%e9%85%8d%e7%bd%ae\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=36290"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36290\/revisions"}],"predecessor-version":[{"id":57932,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/36290\/revisions\/57932"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=36290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=36290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=36290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}