./categories/os
Apache 멀티 SSL 인증서
인증서 준비
ps -ef | grep httpd
mkdir -p conf.d/ssl
cp www.example.com* conf.d/ssl
ls -la conf.d/ssl
ssl.conf (멀티 VirtualHost)
LoadModule ssl_module modules/mod_ssl.so
Listen 443
# SSLPassPhraseDialog exec:/etc/httpd/conf.d/pass.sh # ��� ������ ������ ������
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout 300
<VirtualHost *:443>
DocumentRoot "/var/www/html"
ServerName www.example1.com:443
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES
SSLCertificateFile /etc/httpd/conf.d/ssl/www.example1.com.crt
SSLCertificateKeyFile /etc/httpd/conf.d/ssl/www.example1.com.key
SSLCertificateChainFile /etc/httpd/conf.d/ssl/www.example1.com.ca-bundle
SSLCACertificateFile /etc/httpd/conf.d/ssl/www.example1.com.root-bundle
</VirtualHost>
<VirtualHost *:443>
DocumentRoot "/var/dev/html"
ServerName www.example2.com:443
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES
SSLCertificateFile /etc/httpd/conf.d/ssl/www.example2.com.crt
SSLCertificateKeyFile /etc/httpd/conf.d/ssl/www.example2.com.key
SSLCertificateChainFile /etc/httpd/conf.d/ssl/www.example2.com.ca-bundle
SSLCACertificateFile /etc/httpd/conf.d/ssl/www.example2.com.root-bundle
</VirtualHost>
검증·재시작
/usr/sbin/httpd -t
# RHEL7+: systemctl restart httpd
# 소스: {$httpd_home}/bin/httpd -k restart
ps -ef | grep httpd
netstat -nlp | grep httpd
openssl s_client -connect localhost:443 | openssl x509 -noout -dates
./comments