search

clms2 / arcs

articles
0 stars 0 forks source link

本地apache配置https访问 #34

Open clms2 opened 5 years ago

clms2 commented 5 years ago
  1. httpd.conf: 打开mod_ssl.so、httpd-mpm.conf、httpd-ssl.conf、mod_socache_shmcb.so`的注释
  2. httpd-ssl.conf: 打开SSLCertificateFile、SSLCertificateKeyFile、SSLCACertificateFile、SSLVerifyClient、SSLVerifyDepth
  3. 生成证书：dos进入到apache的bin目录, a. set OPENSSL_CONF=../conf/openssl.cnf b. openssl genrsa -out server.key 2048 c. openssl req -new -key server.key -out server.csr -sha256 -config ../conf/openssl.cnf d. openssl genrsa -out client.key 2048 e. openssl req -new -key client.key -out client.csr -sha256 -config ../conf/openssl.cnf f. openssl req -new -x509 -keyout ca.key -out ca.crt -sha256 -config ../conf/openssl.cnf
  4. bin目录新建demoCA文件夹,新建demoCA/newcerts、demoCA/index.txt、demoCA/serial并输入01保存
  5. openssl ca -in server.csr -out server.crt -cert ca.crt -keyfile ca.key -config ../conf/openssl.cnf
  6. openssl ca -in client.csr -out client.crt -cert ca.crt -keyfile ca.key -config ../conf/openssl.cnf
  7. openssl pkcs12 -export -in ca.crt -inkey ca.key -out ca.pfx,找到ie浏览器的证书选项，导入该文件
  8. openssl rsa -in server.key -out server.key,把该文件和server.crt复制到../conf目录
  9. demoCA/index.txt.attr,修改unique_subject为no

报错

  1. httpd: Could not reliably determine the server's fully qualified domain name: 修改httpd.conf,打开ServerName的注释，ServerName localhost:80
clms2 commented 5 years ago

todo -sha256不会生成sha256证书