{"id":2041,"date":"2016-05-24T19:47:54","date_gmt":"2016-05-24T11:47:54","guid":{"rendered":"http:\/\/boweihe.me\/?p=2041"},"modified":"2016-05-24T19:47:54","modified_gmt":"2016-05-24T11:47:54","slug":"apache%e6%9c%8d%e5%8a%a1%e5%99%a8%e9%85%8d%e7%bd%aewosign%e6%b2%83%e9%80%9assl%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"https:\/\/dayandcarrot.space\/?p=2041","title":{"rendered":"Apache\u670d\u52a1\u5668\u914d\u7f6eWoSign(\u6c83\u901a)SSL\u8bc1\u4e66"},"content":{"rendered":"

\u53c2\u8003\u6587\u732e<\/a>
\n\u4f7f\u7528\u6c83\u901a\u7b7e\u4e86\u4e00\u4efdSSL\u8bc1\u4e66\uff0c\u5176\u5b9e\u914d\u7f6e\u7684\u8fc7\u7a0b\u633a\u7b80\u5355\u7684\uff0c\u770b\u53c2\u8003\u6587\u732e\u57fa\u672c\u80fd\u641e\u5b9a\u3002\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u672c\u6559\u7a0b\u53ea\u5f00\u542f\u4e86HTTPS\u7ad9\u70b9\u7684\u8bbf\u95ee\uff0c\u5e76\u4e0d\u5f3a\u5236\u8df3\u8f6cHTTP\u5230HTTPS<\/strong>\u3002
\n\u6211\u7684\u670d\u52a1\u5668\u662fUbuntu+Apache\uff0c\u6309\u7167apt-get\u5b89\u88c5\u7684apache2\u5e94\u8be5\u5728\u8fd9\u4e2a\/etc\/apache2<\/span>\u00a0\u76ee\u5f55\u4e0b
\n\u53ef\u4ee5\u770b\u5230\u76ee\u5f55\u5927\u6982\u662f\u8fd9\u4e2a\u7ed3\u6784\uff1a<\/p>\n

total 80\n-rw-r--r-- 1 root root 7114 Dec 31 05:57 apache2.conf\ndrwxr-xr-x 2 root root 4096 Dec 31 05:31 conf-available\ndrwxr-xr-x 2 root root 4096 Dec 31 05:31 conf-enabled\n-rw-r--r-- 1 root root 1782 May 20 2015 envvars\n-rw-r--r-- 1 root root 31063 May 20 2015 magic\ndrwxr-xr-x 2 root root 12288 Apr 28 07:03 mods-available\ndrwxr-xr-x 2 root root 4096 May 24 11:17 mods-enabled\n-rw-r--r-- 1 root root 320 May 20 2015 ports.conf\ndrwxr-xr-x 2 root root 4096 Dec 31 05:56 sites-available\ndrwxr-xr-x 2 root root 4096 May 24 11:27 sites-enabled<\/pre>\n
\u5176\u4e2dsites-available\u76ee\u5f55\u4e0b\u5e94\u8be5\u6709\u4e2a\u9ed8\u8ba4\u7684https\u914d\u7f6e\u7684\uff0c\u6211\u8fd9\u8fb9\u5c31\u6709\u4e2adefault-ssl.conf<\/span>\u00a0\uff0c\u7136\u540e\u53c2\u8003\u672c\u6587\u6700\u5f00\u59cb\u63d0\u4f9b\u7684\u53c2\u8003\u6587\u732e\u94fe\u63a5\uff0c\u7f16\u8f91\u8fd9\u4e2a\u6587\u4ef6\uff0c\u505a\u8fd9\u4e48\u51e0\u6b65\uff1a<\/p>\n
    \n
  1. \u914d\u7f6e\u516c\u94a5\uff1a\u4fee\u6539\u5b57\u6bb5SSLCertificateFile conf\/ssl\/test.wosign.com.crt<\/span>\u00a0,SSLCertificateFile\u5b57\u6bb5\u540e\u9762\u7684\u6587\u4ef6\u5730\u5740\u662f\u4f60\u5b58\u50a8\u7684\u516c\u94a5\u6587\u4ef6(\u4ee5\u6211\u7684\u7ad9\u4e3a\u4f8b\uff0cwosign\u53d1\u7ed9\u6211\u7684\u538b\u7f29\u5305\u91cc\u6709for Apache.zip\uff0c\u538b\u7f29\u5305\u91cc\u9762\u5c31\u6709\u4e2a\u00a0_boweihe.me.crt)\uff1b<\/li>\n
  2. \u914d\u7f6e\u79c1\u94a5\uff1a\u4fee\u6539\u5b57\u6bb5SSLCertificateKeyFile conf\/ssl\/test.wosign.com.key<\/span>\u00a0\u540c\u7406\uff0c\u81ea\u884c\u4fee\u6539\u79c1\u94a5\u6587\u4ef6\u5730\u5740\uff08\u79c1\u94a5\u6587\u4ef6\u540e\u7f00\u662f.key\uff09<\/li>\n
  3. \u914d\u7f6e\u670d\u52a1\u5668\u8bc1\u4e66\u94fe\uff1a\u627e\u5230\u4ee5#SSLCertificateChainFile<\/span>\u00a0\u5f00\u5934\u7684\u4e00\u884c\uff0c\u5220\u9664\u884c\u5f00\u5934\u7684#\u53f7\u6ce8\u91ca\uff0c\u5e76\u4fee\u6539\u5b57\u6bb5\u5bf9\u5e94\u503c\u4e3a\u4f60\u7684\u8bc1\u4e66\u94fe\u6587\u4ef6(1_root_bundle.crt)\u5730\u5740\uff0c\u5982SSLCertificateChainFile conf\/ssl\/1_root_bundle.crt<\/span><\/li>\n<\/ol>\n
    \u7136\u540e\u9700\u8981\u542f\u7528\u8fd9\u4e2aHTTPS\u7ad9\u70b9\uff08\u914d\u7f6e\u6587\u4ef6\u7684\u5176\u4ed6\u5185\u5bb9\u4fee\u6539\u53ef\u4ee5\u53c2\u8003\u4f60\u81ea\u5df1\u672c\u8eab\u5df2\u7ecf\u542f\u7528\u7684http\u7ad9\u7684\uff0c\u53ef\u80fd\u8981\u6ce8\u610f\u7684\u662fwebroot\u8981\u4fdd\u6301\u4e00\u81f4\u4ec0\u4e48\u7684\uff09\uff0c\u542f\u7528\u7684\u547d\u4ee4\u5f88\u7b80\u5355<\/p>\n
    a2ensite default-ssl<\/pre>\n
    \u540e\u9762\u7684default-ssl\u662f\u4f60\u521a\u624d\u4fee\u6539\u7684default-ssl.conf\u6587\u4ef6\u7684\u540d\u5b57\uff0c\u5982\u679c\u4f60\u8d77\u4e86\u53e6\u5916\u7684\u540d\u5b57\uff0c\u90a3\u76f8\u5e94\u4fee\u6539\u3002\u547d\u4ee4\u6267\u884c\u6210\u529f\u540e\uff0c\u4f1a\u63d0\u793a<\/p>\n
    To activate the new configuration, you need to run:\n  service apache2 reload\n<\/pre>\n
    \u7167\u7740\u505a\u5c31\u884c\u4e86\uff0c\u91cd\u65b0\u52a0\u8f7d\u4e0bapache\u670d\u52a1\uff1a<\/p>\n
    service apache2 reload<\/pre>\n
    \u81f3\u6b64\u4f60\u7684\u7ad9\u5c31\u53ef\u4ee5\u7528https\u534f\u8bae\u8bbf\u95ee\u4e86\uff0c\u5982\u56fe
    \n    \"https\"<\/a>
    \n\u53ef\u80fd\u9047\u5230\u7684\u95ee\u9898\u662f\uff0c\u7ad9\u70b9\u91cc\u90e8\u5206\u8d44\u6e90\u662f\u975eHTTPS\u534f\u8bae\u7684\uff0c\u8fd9\u65f6\u5019\u56fe\u8868\u5c31\u4e0d\u80fd\u53d8\u7eff\u4e86\u3002\u6bd4\u5982\u6211\u4f7f\u7528\u4e86\u4e03\u725b\u4e91\u7684\u9759\u6001\u6587\u4ef6\u7f13\u5b58\uff0c\u8fd8\u5f97\u53bb\u4eba\u5de5\u63d0\u4ea4\u4e00\u4e0b\u7533\u8bf7\uff0c\u5f00\u901aHTTPS\u9759\u6001\u8d44\u6e90\u8bbf\u95ee\u7684\u534f\u8bae\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
    \u53c2\u8003\u6587\u732e \u4f7f\u7528\u6c83\u901a\u7b7e\u4e86\u4e00\u4efdSSL\u8bc1\u4e66\uff0c\u5176\u5b9e\u914d\u7f6e\u7684\u8fc7\u7a0b\u633a\u7b80\u5355\u7684\uff0c\u770b\u53c2\u8003\u6587\u732e\u57fa\u672c\u80fd\u641e\u5b9a\u3002\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u672c\u6559\u7a0b\u53ea\u5f00\u542f\u4e86HTTPS\u7ad9\u70b9\u7684\u8bbf\u95ee\uff0c\u5e76\u4e0d\u5f3a\u5236\u8df3\u8f6cHTTP\u5230HTTPS\u3002 \u6211\u7684\u670d\u52a1\u5668\u662fUbuntu+Apache\uff0c\u6309\u7167apt-get\u5b89\u88c5\u7684apache2\u5e94\u8be5\u5728\u8fd9\u4e2a\/etc\/apache2\u00a0\u76ee\u5f55\u4e0b \u53ef\u4ee5\u770b\u5230\u76ee\u5f55\u5927\u6982\u662f\u8fd9\u4e2a\u7ed3\u6784\uff1a total 80 -rw-r–r– 1 root root 7114 Dec 31 05:57 apache2.conf drwxr-xr-x 2 root root 4096 Dec 31 05:31 conf-available drwxr-xr-x 2 root root 4096 Dec 31 05:31 conf-enabled -rw-r–r– 1 root root 1782 May 20 2015 envvars -rw-r–r– 1 root root 31063 May 20 2015 magic drwxr-xr-x 2 root root […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[55,103],"class_list":["post-2041","post","type-post","status-publish","format-standard","hentry","category-technical","tag-https","tag-ssl"],"_links":{"self":[{"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=\/wp\/v2\/posts\/2041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2041"}],"version-history":[{"count":0,"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=\/wp\/v2\/posts\/2041\/revisions"}],"wp:attachment":[{"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dayandcarrot.space\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}