Exinda EXNV-10063, Руководство администратора

Страница: 488 / 623

Exinda Network Orchestrator 4 Settings | 488
4. Specify the ports referenced by the virtual hosts
5. Add a <VirtualHost> block for each secure site on the server
6. Verify the secure server configuration
7. Managing Certificates and CA Certificates
8. Configure SSL Acceleration Servers
Enable SSL on Apache
To use SSL on Apache, the mod_ssl module must be enabled.
To enable the mod_ssl module, type the following command: sudo a2enmod ssl
Specify the ports referenced by the virtual hosts
A SSL web server must run on a different port than an unencrypted web server. The standard port for HTTPS traffic is 443,
but any port number can be used. Apache will not accept incoming connections to any ports if they are not specified
with a
Listen <port_number>
directive in the active configuration set.
1. Navigate to /etc/apache2/conf.d and open the ports.conf file in an editor.
2. Locate the
<IfModule mod_ssl.c>
block.
3.
Ensure
Listen 443
is included in the block.
4. Add
NameVirtualHost *:443
to the block.
5.
Save the configuration file.
Add a <VirtualHost> block for each secure site on the server
For each domain name or domain subset we want to support SSL for, a VirtualHost block must be declared. This block
identifies the domain name to support connections for, and what Certificate or Key files to use for it.
1.
Navigate to
/etc/apache2/sites-enabled
and open the folder for the secure site.
2. Open the <site_name>.conf file in an editor.
3.
Add the <virtualhost> block for the secure server.
The block will look similar to this:
<VirtualHost *:443>
ServerName "secure2.example.com"
ServerAdmin webmaster@example.com
DocumentRoot /home/demo/public_html/secure1.example.com/public
ErrorLog /home/demo/public_html/secure2.example.com/log/error.log
LogLevel warn
CustomLog /home/demo/public_html/secure2.example.com/log/access.log combined
<Directory /home/demo/public_html/secure2.example.com/public>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>