{"id":26727,"date":"2024-05-27T16:59:28","date_gmt":"2024-05-27T08:59:28","guid":{"rendered":"https:\/\/www.zhidianwl.net\/zhidianwl\/?p=26727"},"modified":"2024-05-27T16:59:28","modified_gmt":"2024-05-27T08:59:28","slug":"%e7%94%b3%e8%af%b7%e7%9a%84ssl%e8%af%81%e4%b9%a6%e6%80%8e%e4%b9%88%e5%88%a0%e9%99%a4%e5%91%a2%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/www.zhidianwl.net\/zhidianwl\/2024\/05\/27\/%e7%94%b3%e8%af%b7%e7%9a%84ssl%e8%af%81%e4%b9%a6%e6%80%8e%e4%b9%88%e5%88%a0%e9%99%a4%e5%91%a2%ef%bc%9f\/","title":{"rendered":"\u7533\u8bf7\u7684ssl\u8bc1\u4e66\u600e\u4e48\u5220\u9664\u5462\uff1f"},"content":{"rendered":"
SSL\u8bc1\u4e66\u662f\u4e00\u79cd\u7528\u4e8e\u52a0\u5bc6\u7f51\u7ad9\u6570\u636e\u4f20\u8f93\u7684\u5b89\u5168\u534f\u8bae\uff0c\u901a\u5e38\u7531\u7b2c\u4e09\u65b9\u673a\u6784\u9881\u53d1\u3002\u5728\u7f51\u7ad9\u4f7f\u7528SSL\u8bc1\u4e66\u7684\u8fc7\u7a0b<\/p>\n
\u4e2d\uff0c\u6709\u65f6\u5019\u9700\u8981\u5220\u9664\u65e7\u7684\u8bc1\u4e66\u6216\u8005\u66ff\u6362\u4e3a\u65b0\u7684\u8bc1\u4e66\u3002\u4e0b\u9762\u5c06\u4ecb\u7ecd\u5982\u4f55\u5220\u9664SSL\u8bc1\u4e66\u7684\u65b9\u6cd5\u53ca\u539f\u7406\u3002<\/p>\n \u9996\u5148\u9700\u8981\u4e86\u89e3\u7684\u662f\uff0cSSL\u8bc1\u4e66\u901a\u5e38\u662f\u5b89\u88c5\u5728Web\u670d\u52a1\u5668\u4e0a\u7684\uff0c\u56e0\u6b64\u5220\u9664SSL\u8bc1\u4e66\u7684\u65b9\u6cd5\u4e5f\u4e0eWeb\u670d\u52a1\u5668\u7684\u7c7b\u578b\u6709\u5173\u3002\u5728\u8fd9\u91cc\uff0c\u6211\u4eec\u4ee5Apache\u670d\u52a1\u5668\u4e3a\u4f8b\u8fdb\u884c\u4ecb\u7ecd\u3002<\/p>\n \u5220\u9664SSL\u8bc1\u4e66\u7684\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n \u6b65\u9aa4\u4e00\uff1a\u5907\u4efdSSL\u8bc1\u4e66\u6587\u4ef6<\/p>\n \u5728\u5220\u9664SSL\u8bc1\u4e66\u4e4b\u524d\uff0c\u9700\u8981\u5148\u5907\u4efd\u8bc1\u4e66\u6587\u4ef6\u3002\u8bc1\u4e66\u6587\u4ef6\u901a\u5e38\u5305\u62ec\u4e09\u4e2a\u6587\u4ef6\uff1a\u8bc1\u4e66\u6587\u4ef6\u3001\u79c1\u94a5\u6587\u4ef6\u548c\u4e2d\u95f4CA\u8bc1\u4e66\u6587\u4ef6\u3002\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u547d\u4ee4\u5907\u4efd\u8bc1\u4e66\u6587\u4ef6\uff1a<\/p>\n “`<\/p>\n cp \/path\/to\/certificate.crt \/path\/to\/certificate.crt.bak<\/p>\n cp \/path\/to\/private.key \/path\/to\/private.key.bak<\/p>\n cp \/path\/to\/intermediate.crt \/path\/to\/intermediate.crt.bak<\/p>\n “`<\/p>\n \u6b65\u9aa4\u4e8c\uff1a\u505c\u6b62Apache\u670d\u52a1\u5668<\/p>\n \u5728\u5220\u9664SSL\u8bc1\u4e66\u4e4b\u524d\uff0c\u9700\u8981\u5148\u505c\u6b62Apache\u670d\u52a1\u5668\u3002\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u505c\u6b62Apache\u670d\u52a1\u5668\uff1a<\/p>\n “`<\/p>\n sudo service apache2 stop<\/p>\n “`<\/p>\n \u6b65\u9aa4\u4e09\uff1a\u5220\u9664SSL\u8bc1\u4e66\u6587\u4ef6<\/p>\n \u5728\u505c\u6b62Apache\u670d\u52a1\u5668\u4e4b\u540e\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5220\u9664\u8bc1\u4e66\u6587\u4ef6\uff1a<\/p>\n “`<\/p>\n sudo rm \/path\/to\/certificate.crt<\/p>\n sudo rm \/path\/to\/private.key<\/p>\n sudo rm \/path\/to\/intermediate.crt<\/p>\n “`<\/p>\n \u6b65\u9aa4\u56db\uff1a\u7f16\u8f91Apache\u914d\u7f6e\u6587\u4ef6<\/p>\n \u5728\u5220\u9664SSL\u8bc1\u4e66\u6587\u4ef6\u4e4b\u540e\uff0c\u9700\u8981\u7f16\u8f91Apache\u670d\u52a1\u5668\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5c06SSL\u8bc1\u4e66\u7684\u76f8\u5173\u914d\u7f6e\u5220\u9664\u3002\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n “`<\/p>\n sudo vi \/etc\/apache2\/sites-available\/default-ssl.conf<\/p>\n “`<\/p>\n \u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0c\u627e\u5230\u4ee5\u4e0b\u914d\u7f6e\u9879\uff1a<\/p>\n “`<\/p>\n SSLCertificateFile \/path\/to\/certificate.crt<\/p>\n SSLCertificateKeyFile \/path\/to\/private.key<\/p>\n SSLCertificateChainFile \/path\/to\/intermediate.crt<\/p>\n “`<\/p>\n \u5c06\u4ee5\u4e0a\u914d\u7f6e\u9879\u5220\u9664\u5373\u53ef\u3002<\/p>\n \u6b65\u9aa4\u4e94\uff1a\u91cd\u542fApache\u670d\u52a1\u5668<\/p>\n \u5728\u5220\u9664SSL\u8bc1\u4e66\u6587\u4ef6\u548c\u7f16\u8f91Apache\u914d\u7f6e\u6587\u4ef6\u4e4b\u540e\uff0c\u9700\u8981\u91cd\u65b0\u542f\u52a8Apache\u670d\u52a1\u5668\u3002\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u91cd\u542fApache\u670d\u52a1\u5668\uff1a<\/p>\n “`<\/p>\n sudo service apache2 restart<\/p>\n “`<\/p>\n SSL\u8bc1\u4e66\u5220\u9664\u7684\u539f\u7406\uff1a<\/p>\n SSL\u8bc1\u4e66\u662f\u901a\u8fc7\u6570\u5b57\u7b7e\u540d\u6765\u4fdd\u8bc1\u5176\u771f\u5b9e\u6027\u548c\u53ef\u4fe1\u5ea6\u7684\u3002\u6570\u5b57\u7b7e\u540d\u662f\u4e00\u79cd\u7528\u4e8e\u9a8c\u8bc1\u8bc1\u4e66\u7684\u6280\u672f\uff0c\u5b83\u5305\u62ec\u4e24\u4e2a\u90e8\u5206\uff1a\u79c1\u94a5\u548c\u516c\u94a5\u3002\u79c1\u94a5\u7531\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u6301\u6709\uff0c\u7528\u4e8e\u5bf9\u8bc1\u4e66\u8fdb\u884c\u6570\u5b57\u7b7e\u540d\uff1b\u516c\u94a5\u5219\u7531\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u53d1\u5e03\uff0c\u7528\u4e8e\u9a8c\u8bc1\u8bc1\u4e66\u7684\u771f\u5b9e\u6027\u3002<\/p>\n<\/figure>\n<\/p>\n