How to deploy different SSL certificates for different domain names with Apache
In this article, the editor introduces in detail "how Apache implements different SSL certificates for different domain names". The content is detailed, the steps are clear, and the details are handled properly. I hope this article "how to deploy different SSL certificates for different domain names" can help you solve your doubts.
To deploy different SSL certificates for different domain names of Apache servers, you need to support SNI (Server Name Indication), which means you need to meet the following conditions:
(1) apache version 2.2.12 or above
(2) openssl version 0.9.8f or above
First you need to know how to deploy SSL certificates on Apache. Please refer to the Apache SSL Certificate deployment Guide.
Let's take a look at how the Apache server implements different domain names and deploys different SSL certificates.
You can deploy all site configurations under one profile, or you can add them separately under each site profile.
Refer to the following configuration:
Listen 443
-
ServerName www.trustauth.cn
DocumentRoot / var/www/site
SSLEngine on
SSLProtocol all-SSLv2-SSLV3
SSLCipherSuite all, the DHV, the export, the RC4, the HIGH, the MEDIUM, the NULLL, the enull.
SSLCertificateFile / path/to/trustauth.cn.crt
SSLCertificateKeyFile / path/to/trustauth.cn.key
SSLCertificateChainFile / path/to/1_root_bundle.crt
-
ServerName test.trustauth.cn
DocumentRoot / var/www/site2
SSLEngine on
SSLProtocol all-SSLv2-SSLV3
SSLCipherSuite all, the DHV, the export, the RC4, the HIGH, the MEDIUM, the NULLL, the enull.
SSLCertificateFile / path/to/trustauth.cn.crt
SSLCertificateKeyFile / path/to/trustauth.cn.key
SSLCertificateChainFile / path/to/1_root_bundle.crt
Finally, restart the Apache server.
When you use a browser to access, please pay attention to whether your browser version supports the SNI feature, please check the browser that supports SNI.
After reading this, the article "how to deploy different SSL certificates for different domain names with Apache" has been introduced. If you want to master the knowledge points of this article, you still need to practice and use it yourself. If you want to learn more about related articles, please follow the industry information channel.
