|
|
| （未显示5个用户的134个中间版本） |
| 第1行： |
第1行： |
| − | The ''mod_ssl'' module adds an important feature to the Apache2 server - the ability to encrypt communications. Thus, when your browser is communicating using SSL, the https:// prefix is used at the beginning of the Uniform Resource Locator (URL) in the browser navigation bar.
| + | [[文件:14.png]] |
| − | | + | |
| − | The ''mod_ssl'' module is available in ''apache2-common'' package. Execute the following command from a terminal prompt to enable the ''mod_ssl'' module:<br/><code style="background-color:lightgray">sudo a2enmod ssl</code>
| + | |
| − | | + | |
| − | There is a default HTTPS configuration file in /etc/apache2/sites-available/default-ssl. In order for Apache2 to provide HTTPS, a certificate and key file are also needed. The default HTTPS configuration will use a certificate and key generated by the ssl-cert package. They are good for testing, but the auto-generated certificate and key should be replaced by a certificate specific to the site or server. For information on generating a key and obtaining a certificate see [https://help.ubuntu.com/12.04/serverguide/certificates-and-security.html Certificates]
| + | |
| − | | + | |
| − | To configure Apache2 for HTTPS, enter the following:<br/><code style="background-color:lightgray">sudo a2ensite default-ssl</code>
| + | |
| − | | + | |
| − | : <span style="background-color:lightgray">The directories /etc/ssl/certs and /etc/ssl/private are the default locations. If you install the certificate and key in another directory make sure to change SSLCertificateFile and SSLCertificateKeyFile appropriately. </span>
| + | |
| − | | + | |
| − | With Apache2 now configured for HTTPS, restart the service to enable the new settings: <br/><code style="background-color:lightgray">sudo service apache2 restart</code>
| + | |
| − | | + | |
| − | : <span style="background-color:lightgray">Depending on how you obtained your certificate you may need to enter a passphrase when Apache2 starts. </span>
| + | |
| − | | + | |
| − | You can access the secure server pages by typing https://your_hostname/url/ in your browser address bar.
| + | |
