您的位置:首页 > 理论基础 > 计算机网络

Apache与nginx下HTTPS方式的配置

2012-08-22 13:02 429 查看
nginx 

    # HTTPS server

    #

    server {

        listen       443;

        server_name  test.apps.com;

        ssl                  on;
        ssl_certificate      D:/usr/server/nginx-1.0.0/conf/cert/server_cert.pem;

        ssl_certificate_key  D:/usr/server/nginx-1.0.0/conf/cert/server_key.pem;

        ssl_session_timeout  5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1;

        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

        ssl_prefer_server_ciphers   on;

        location / {

            root   d:/usr/wwwroot/company/system;

            fastcgi_pass 127.0.0.1:9000;

            fastcgi_index index.php;

            fastcgi_param SCRIPT_FILENAME d:/usr/wwwroot/company/system$fastcgi_script_name;

            include fastcgi_params;

            index  index.html index.htm index.php;

        }

    }

Apache

<VirtualHost _default_:443>

#   General setup for the virtual host

DocumentRoot "D:/usr/wwwroot/company/system"

ServerName test.apps.com/:443

ServerAdmin pingzheng@ftsafe.com

ErrorLog "D:/usr/local/Apache2.2.14/logs/ssl_error.log"

TransferLog "D:/usr/local/Apache2.2.14/logs/ssl_access.log"

<Directory "D:/usr/wwwroot/company/system">
Options Indexes FollowSymLinks
AllowOverride all
Order allow,deny
Allow from all
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /apps/
#RewriteCond %{REQUEST_FILENAME} !-f
#RewriteCond %{REQUEST_FILENAME} !-d
#RewriteRule . /index.php [L]
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R]
</IfModule>

</Directory>

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile "D:/usr/local/Apache2.2.14/conf/cert/server_cert.pem"

SSLCertificateKeyFile "D:/usr/local/Apache2.2.14/conf/cert/server_key.pem"

#SSLCertificateChainFile "/usr/local/etc/apache22/cert/ca.crt"

#SSLCACertificateFile "/usr/local/etc/apache22/cert/ca.crt"

SSLVerifyClient none

SSLVerifyDepth  10
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息