PaaS/기타

Apache SSL 적용 (Centos)

armyost 2021. 5. 12. 22:43
728x90

■ yum등을 통해 mod_ssl.so 설치

/usr/local/apache2/modules/mod_ssl.so

 

#vi httpd.conf

LoadModule ssl_module modules/mod_ssl.so

Include conf/extra/httpd-ssl.conf

 

#vi /usr/local/apache2/conf/extra/httpd-ssl.conf

에서 불필요한거 다 지움

 

#cp /usr/local/apache2/conf/extra/httpd-ssl.conf /usr/local/apache2/conf/ssl/httpd-ssl.conf

#vi /usr/local/apache2/conf/ssl/httpd-ssl.conf

/*
DocumentRoot "~~~~~~~~~~~~" 
ServerName www.test.co.kr 
ServerAdmin admin@test.co.kr 
*/


SSLEngine on

SSLProtocol all -SSLv2 -SSLv3 
SSLCipherSuite HIGH:MEDIUM:!SSLv2:!PSK:!SRP:!ADH:!AECDH 
SSLCertificateFile /usr/local/apache2/conf/ssl/cert.pem
SSLCertificateKeyFile /usr/local/apache2/conf/ssl/key.pem 
SSLCertificateChainFile /usr/local/apache2/conf/ssl/ThawteDigiCert-Newchain.pem


/*
SSLEngine on
SSLCertificateFile [인증서 파일 경로]
SSLCertificateKeyFile [키파일 경로]
SSLCACertificateFile [중계인증서 파일경로] 
*/



<IfModule jk_module>
  JkWorkersFile "/usr/local/apache2/conf/workers.properties"
  JkLogFile "|/usr/local/apache2/bin/rotatelogs /usr/local/apache2/logs/mod_jk.log.%Y_%m_%d 20M"
  JkLogLevel info
  JkAutoAlias "/usr/local/tomcat8/webapps"


<VirtualHost _default_:9443>
DocumentRoot "/home/apache/apache/htdocs"
ServerName 도메인:IP
ServerAdmin you@example.com
ErrorLog "/home/apache/apache/logs/error_log"
TransferLog "/home/apache/apache/logs/access_log"
JkMount /* load_balancer