SSL证书安装指南 - Apache-SSL / Apache ModSSL

2025-08-28 本站作者【字体：大中小】

1. 保存证书文件 Save the certificate file

一旦您申请的SSL证书成功颁发，您会收到一个邮件通知您取回证书，点击邮件中的取回证书链接，就可以得到您的证书文件。此文件是一个打包文件，包含了您申请的证书类型的证书链文件、公钥证书。或直接给您的是包含证书公钥和私钥的打包文件，有支持所有服务器类型的3种格式证书文件和各级根证书文件。

2. 安装证书 Install the Certificate

A. 把SSL证书和中级根证书拷贝到Apache存放证书的目录中，如： /etc/httpd/conf/ssl.crt/

a. Copy the certificate and Intermediate CA Certificate to the Apache directory in which you plan to store your certificates (example: /etc/httpd/conf/ssl.key/ or /etc/httpd/conf/ssl.crt/).

B.使用文本编辑器打开http.conf文件，添加如下3行参数(如果没有的话)

b. Open the Apache httpd.conf file in a text editor (notepad/vi). Locate the SSL VirtualHost associated with your certificate. Verify that you have the following 3 directives within this virtual host. Please add them if they are not present:

SSLCertificateKeyFile /where/the/key/is/located/www.mydomain.com.key

SSLCertificateFile /where/the/certificate/is/located/www.mydomain.com.crt

SSLCACertificateFile /where/the/certificate/is/located/intermediate.crt

沃通证书安装_Apache SSL证书安装教程_Apache ModSSL配置指南

请注意： Apache中含有https.conf和ssl.conf两个功能相同的文件，请只修改其中一个文件，否则会有冲突而使得Apache不能正常启动。

Note that some instances of Apache contain both a httpd.conf and ssl.conf file. Please enter or amend the httpd.conf or the ssl.conf with the above directives. Do not enter the information in both as there will be a conflict and Apache will not start.

c. 保存修改。 Save the changes and exit the editor.

d. 使用如下命令停止Apache后再启动Apache，以便Apache daemon能注册修改的参数。

Stop and start the Apache daemon which will register the changes that have been made in the config file. You can use the following commands:

/usr/sbin/apachectl stop /usr/sbin/apachectl startssl

or:

/usr/sbin/httpd -k stop /usr/sbin/httpd -DSSL

3. 完成配置 Setup the server

请一定要分配443端口和一个固定的IP地址给主机(注意：防火墙一定要开放443端口TCP)。

Make sure you assign port 443 and a unique ip address (i.e )to the virtual host. Apache does not support name based virtual hosts therefore host headers must not be specified in the VirtualHost directive.Note: If the server is behind a firewall please make sure port 443 has been enabled on the firewall.