Apache 安装 SSL 证书

适用于 Apache Web Server。

准备文件

• 证书文件：domain.crt
• 私钥文件：domain.key
• CA 链文件：ca-bundle.crt

建议放在：

/etc/ssl/example.com/

示例配置

<VirtualHost *:443>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/example.com/public

    SSLEngine on
    SSLCertificateFile /etc/ssl/example.com/domain.crt
    SSLCertificateKeyFile /etc/ssl/example.com/domain.key
    SSLCertificateChainFile /etc/ssl/example.com/ca-bundle.crt
</VirtualHost>

强制 HTTPS

<VirtualHost *:80>
    ServerName example.com
    ServerAlias www.example.com
    Redirect permanent / https://example.com/
</VirtualHost>

重载服务

sudo apachectl configtest
sudo systemctl reload apache2 || sudo systemctl reload httpd