apache2整合weblogic虚拟主机下的ssl配置
分四部分
1。应用目标和环境2。apache2weblogicopenssl安装3。虚拟主机的配置4。补遗或注解一.应用目标和环境
应用目标1。jsp支持的webserver,只有一个ip,多个虚拟主机,其中有一个支持ssl的虚拟主机。应用环境1.os为solaris9和建议补丁2.weblogic为8.1sp4,java为1.4.1_06-b013.OpenSSL0.9.7g4.apache2.0.54二.apache2weblogicopenssl安装
1.apache2.0.54的安装略2.weblogic8.1sp4的安装略3.openssl的安装略三.虚拟主机的配置
ServerAdminDocumentRoot"/web/bbs"ServerNamebbs.testmysite.comLogFormat"%h%l%u%t"%r"%>s%b"%{Referer}i""%{User-Agent}i""combinedCustomLoglogs/bbs-access_logcombinedServerNamebbs.testmysite.comServerAliasdiyErrorLoglogs/bbs-error_logTransferLoglogs/bbs-access_logWebLogicHost192.168.1.254WebLogicPort7001MatchExpression*.jspMatchExpression*.jspaMatchExpression*.doOptionsFollowSymLinksMultiViewsIncludesAddOutputFilterIncludeshtmlAllowOverrideNoneAllowfromallOrderdeny,allowDenyfromall
ServerAdminDocumentRoot"/web/diy"ServerNamediy.testmysite.comErrorLoglogs/diy-error_logTransferLoglogs/diy-access_logWebLogicHost192.168.1.254WebLogicPort7001MatchExpression*.jspMatchExpression*.jspaMatchExpression*.doOptionsFollowSymLinksMultiViewsIncludesAddOutputFilterIncludeshtmlAllowOverrideNoneAllowfromallOrderdeny,allowDenyfromall
ServerNamessl.testmysite.comDocumentRoot"/web/ssl"CustomLoglogs/ssl-access_logcommonSSLEngineonSSLCipherSuiteALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULLSSLCertificateFileconf/ssl.crt/server.crtSSLCertificateKeyFileconf/ssl.key/server.keySSLOptions+StdEnvVarsSSLOptions+StdEnvVarsSetEnvIfUser-Agent".*MSIE.*"nokeepalivessl-unclean-shutdowndowngrade-1.0force-response-1.0WebLogicHost192.168.1.254WebLogicPort7001MatchExpression*.jspMatchExpression*.doMatchExpression*.jspaMatchExpression/myhome/*OptionsFollowSymLinksMultiViewsIncludesAddOutputFilterIncludes.shtmlAddOutputFilterIncludes.phpAllowOverrideNoneAllowfromallOrderdeny,allowDenyfromall
1.认证文件的认证方式本例中采用的自认证的方式,就是说没有去购买证书,如果是商业站点可以考虑购买证书。2.自认证文件的生成a.生成privateKey文件opensslgenrsa-des3-outserver.key1024b.创建服务器端的认证文件opensslreq-new-x509-nodes-sha1-days365-keyserver.key-outserver.crt