2017-09-04 37 views
1

我已经按照以下链接启用了centos-7 apache中的http/2。 https://www.tunetheweb.com/performance/http2/如何添加让http/2在centos 7中加密证书?

Apache的版本:2.4.27

我OpenSSL的版本:

# openssl version 
OpenSSL 1.1.0f 25 May 2017 

我需要HTTPS证书添加到域检查HTTP/2的过程在浏览器中。

虽然我尝试添加使用证书加密允许它 报告为:虽然继允许加密证书,并添加过程

#sudo certbot --apache 
We were unable to find a vhost with a ServerName or Address of xxx.yyy.com. 
Which virtual host would you like to choose? 
(note: conf files with multiple vhosts are not yet supported) 
------------------------------------------------------------------------------- 
1: ssl.conf      |      | HTTPS | Enabled 
------------------------------------------------------------------------------- 
Press 1 [enter] to confirm the selection (press 'c' to cancel): 1 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Cleaning up challenges 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Encountered exception during recovery 
Error while running apachectl graceful. 
Job for httpd.service invalid. 
Traceback (most recent call last): 
    File "/usr/lib/python2.7/site-packages/certbot/error_handler.py", line 99, in _call_registered 
    self.funcs[-1]() 
    File "/usr/lib/python2.7/site-packages/certbot/auth_handler.py", line 284, in _cleanup_challenges 
    self.auth.cleanup(achalls) 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1908, in cleanup 
    self.restart() 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1797, in restart 
    self._reload() 
    File "/usr/lib/python2.7/site-packages/certbot_apache/configurator.py", line 1808, in _reload 
    raise errors.MisconfigurationError(str(err)) 
MisconfigurationError: Error while running apachectl graceful. 
Job for httpd.service invalid. 
Error while running apachectl graceful. 
Job for httpd.service invalid. 

#yum install certbot-apache 

Installing: 
python2-certbot-apache       noarch       0.14.1-1.el7          epel        144 k 
Installing for dependencies: 
httpd           x86_64       2.4.6-45.el7.centos.4        updates       2.7 M 
mod_ssl           x86_64       1:2.4.6-45.el7.centos.4        updates       105 k 

它添加这些软件包。所以http-2.4.6和2.4.27都存在于服务器中。

回答

0

我想我可以让你靠近一步。试试这个:

certbot --authenticator standalone --installer apache --pre-hook "systemctl stop httpd" --post-hook "systemctl start httpd" 

也尝试上述... systemctl status httpd前检查阿帕奇的状态。如果它已关闭并且无法启动,请找到僵尸线程(ps -ef|grep httpd)并杀死它们。 (或重新启动)。