24、Apache-SSL 安装与配置全指南

Apache-SSL安装与配置详解

Mars5

于 2025-07-23 16:45:37 发布

阅读量40

点赞数

CC 4.0 BY-SA版权

分类专栏：探索《最大化的Apache安全》：Web服务器防护全解析文章标签： Apache-SSL OpenSSL SSL配置

本文链接：https://blog.youkuaiyun.com/mars5/article/details/149889656

探索《最大化的Apache安全》：Web服务器防护全解析专栏收录该内容

36 篇文章 ¥499.90

订阅专栏¥69.90

会员秒杀 ¥9.9 重磅福利

超级会员免费看

Apache-SSL 安装与配置全指南

1. 会话特性与 Apache-SSL 简介

1.1 会话特性配置

以下是一些会话特性的配置示例：

# Some characteristics of the session
SSLVerifyDepth       1
SSLCACertificateFile conf/ssl.crt/your-company-ca.crt
SSLOptions           +FakeBasicAuth +StrictRequire
# Make sure they’re using strong SSL
SSLRequire           %{SSL_CIPHER_USEKEYSIZE} >= 128
# Some rules to apply to clients who can connect
SSLRequireSSL
SSLRequire           %{SSL_CLIENT_S_DN_O}  eq “Pearson” and \
%{SSL_CLIENT_S_DN_OU} in {“Editorial”, “CA”, “Dev”}
# Force HTTPS
RewriteEngine        on
RewriteCond          %{REMOTE_ADDR} !^192\.168\.1\.[0-9]+$
RewriteCond          %{HTTPS} !=on
RewriteRule          .* - [F]
# Network Access and Basic Auth
Satisfy