2016-12-14 87 views
0

我想在自己的云端9安装上设置自签名证书SSL。更新我的.conf文件并在我的网址前添加一个https后,我收到“本网站无法访问”错误。我猜测我的SSL设置在Apache中有些不正确,但我无法弄清楚什么。Owncloud SSL设置

我运行Fedora24和Owncloud9

我包括我的conf文件。

/etc/httpd/conf.d/ssl.conf

Listen 443 https 

SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog 

SSLSessionCache   shmcb:/run/httpd/sslcache(512000) 
SSLSessionCacheTimeout 300 

SSLRandomSeed startup file:/dev/urandom 256 
SSLRandomSeed connect builtin 

SSLCryptoDevice builtin 

<VirtualHost _default_:443> 

DocumentRoot "/var/www/mywebsite/html" 
ServerName mywebsite.com:443 

ErrorLog logs/ssl_error_log 
TransferLog logs/ssl_access_log 
LogLevel warn 

SSLEngine on 

SSLProtocol all -SSLv3 
SSLProxyProtocol all -SSLv3 

SSLHonorCipherOrder on 

SSLCipherSuite PROFILE=SYSTEM 
SSLProxyCipherSuite PROFILE=SYSTEM 

SSLCertificateFile /etc/pki/tls/certs/mywebsite.com.pem 

SSLCertificateKeyFile /etc/pki/tls/certs/mywebsite.com.key 

<Files ~ "\.(cgi|shtml|phtml|php3?)$"> 
    SSLOptions +StdEnvVars 
</Files> 
<Directory "/var/www/cgi-bin"> 
    SSLOptions +StdEnvVars 
</Directory> 

BrowserMatch "MSIE [2-5]" \ 
     nokeepalive ssl-unclean-shutdown \ 
     downgrade-1.0 force-response-1.0 

# Per-Server Logging: 
# The home of a custom SSL log file. Use this when you want a 
# compact non-error SSL logfile on a virtual host basis. 
CustomLog logs/ssl_request_log \ 
      "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" 

</VirtualHost> 

/etc/httpd/conf.d/mywebsite.conf

<VirtualHost *:443> 
    SSLEngine on 

    ServerAdmin [email protected] 
    ServerName mywebsite 
    ServerAlias mywebsite.com 
    DocumentRoot /var/www/mywebsite/html 
    <Directory /var/www/mywebsite/html> 
     Options Indexes FollowSymLinks 
     AllowOverride All 
     Require all granted 
    </Directory> 
    SSLCertificateFile /etc/pki/tls/certs/mywebsite.com.pem 
    SSLCertificateKeyFile /etc/pki/tls/certs/mywebsite.com.key 
</VirtualHost> 

的/ etc/httpd/conf/httpd.conf

ServerRoot "/etc/httpd" 
Listen 80 

Include conf.modules.d/*.conf 

User apache 
Group apache 

ServerAdmin [email protected] 

<Directory /> 
    AllowOverride none 
    Require all denied 
</Directory> 

DocumentRoot "/var/www" 

<Directory "/var/www"> 
    AllowOverride None 
    Require all granted 
</Directory> 

<Directory "/var/www"> 
    Options Indexes FollowSymLinks 
    AllowOverride None 
    Require all granted 
</Directory> 

<IfModule dir_module> 
    DirectoryIndex index.html 
</IfModule> 

<Files ".ht*"> 
    Require all denied 
</Files> 

ErrorLog "logs/error_log" 

LogLevel warn 

<IfModule log_config_module> 
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined 
    LogFormat "%h %l %u %t \"%r\" %>s %b" common 

    <IfModule logio_module> 
     # You need to enable mod_logio.c to use %I and %O 
     LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio 
    </IfModule> 

    CustomLog "logs/access_log" combined 
</IfModule> 

<IfModule alias_module> 
    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" 
</IfModule> 

<Directory "/var/www/cgi-bin"> 
    AllowOverride None 
    Options None 
    Require all granted 
</Directory> 

<IfModule mime_module> 
    TypesConfig /etc/mime.types 
    AddType application/x-compress .Z 
    AddType application/x-gzip .gz .tgz 
    AddType text/html .shtml 
    AddOutputFilter INCLUDES .shtml 
</IfModule> 

AddDefaultCharset UTF-8 

<IfModule mime_magic_module> 
    MIMEMagicFile conf/magic 
</IfModule> 

#EnableMMAP off 
EnableSendfile on 

# Supplemental configuration 
# 
# Load config files in the "/etc/httpd/conf.d" directory, if any. 
IncludeOptional conf.d/*.conf 
+0

为什么要使用烦人的自签名证书而不是有效的LetsEncrypt证书,这是真正免费的? – arkascha

回答

0

aaaaand,祝贺我自己实现我的路由器上有443端口被阻塞。 谢谢大家。