在阿里云上申请免费的证书:

214563512000397.key  214563512000397.pem  chain.pem  public.pem


开启这两个模块,mod_socache_shmcb.so这个模块是用来实现缓存的,mod_ssl.so 为加密模块。

LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
LoadModule ssl_module modules/mod_ssl.so


httpd2.4配置文件如下:

Listen 443

SSLProtocol all -SSLv2 -SSLv3

SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM

SSLHonorCipherOrder on 

SSLPassPhraseDialog  builtin

SSLSessionCache        "shmcb:/alidata/server/httpd/logs/ssl_scache(512000)"
SSLSessionCacheTimeout  300

<VirtualHost _default_:443>

DocumentRoot "/alidata/www/zhuqiyang/"
ServerName www.example.com:443
ServerAdmin you@example.com
ErrorLog "/alidata/server/httpd/logs/error_log"
TransferLog "/alidata/server/httpd/logs/access_log"

SSLEngine on

SSLCertificateFile "cert/public.pem"

SSLCertificateKeyFile "cert/214563512000397.key"

SSLCertificateChainFile "cert/chain.pem"

<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/alidata/server/httpd/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog "/alidata/server/httpd/logs/ssl_request_log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>