[ssl]comodo ssl + apache

整理部分步驟 1.openssl 產生KEY FILE openssl genrsa -out ca.key 2048 產生csr(主要傳到comodo上去簽章) openssl req -new -key ca.key -out ca.csr 2.合成bundle.crt cat COMODORSADomainValidationSecureServerCA.crt COMODORSAAddTrustCA.crt AddTrustExternalCARoot.crt >> bundle.crt 3.修改 apche httpd virtual設定 (EX:/etc/httpd/conf.d/000-default.conf) ProxyPreserveHost On SSLEngine on SSLCertificateKeyFile /etc/ssl/cardsfun/ca.key SSLCertificateFile /etc/ssl/cardsfun/www_cardsfun_net.crt SSLCACertificateFile /etc/ssl/cardsfun/bundle.crt ServerName www.servername.com 4.重新啟動apache PS:驗證方式 Heartbleed Vulnerability Scanner (https://sslanalyzer.comodoca.com/heartbleed.html) 輸入相關網址或是IP 可以看到掃描結果