CentOS7下Apache及Tomcat开启SSL

2022-11-06 19:59:15

安装：

复制代码
yum install -y openssl　　　　#使用openssl可手动创建证书
yum install -y httpd
yum install -y mod_ssl

防火墙打开80、443端口，然后重启

firewall-cmd --zone=public --add-port=80/tcp --permanent
firewall-cmd --zone=public --add-port=443/tcp --permanent
firewall-cmd --reload

Apache开启

systemctl enable httpd
systemctl start httpd
复制代码
强制HTTP-->HTTPS：

vim /etc/httpd/conf/httpd.conf 添加如下内容

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$　　　　　　#另一种写法：RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L] 　　#301表示永久移走
【Tomcat开启SSL】

http://sanketdangi.com/post/43734145363/secure-tomcat-through-apache-using-ajp

复制代码

vi /etc/httpd/conf.d/ssl.conf 添加如下内容 application1,application2代表tomcat应用，请替换

ProxyPass /application1 ajp://127.0.0.1/application1
ProxyPass /application2 ajp://127.0.0.1/application2
ProxyPassReverse /application1 ajp://127.0.0.1/application1
ProxyPassReverse /application2 ajp://127.0.0.1/application2

AddDefaultCharset off
Order deny,allow
Allow from all

复制代码