无法在Debian上为Apache 2设置SSL支持

我正在尝试在Debian上设置对Apache 2的ssl支持。 版本是：

Debian GNU/Linux 6.0 apache2 2.2.16-6+squeeze1 

我跟随了很多日子，但我无法做到这一点。 这里是我的步骤和configuration文件（ServerName和DocumentRoot被改变为隐私，以防告诉我）：

 # mkdir /etc/apache2/ssl # openssl req $@ -new -x509 -days 365 -nodes -out /etc/apache2/ssl/apache.pem -keyout /etc/apache2/ssl/apache.pem 

在这一点上，我对apache.pem的权限有疑问，在这一步他们是

 -rw-r--r-- 1 root root 

也许它必须属于万维网数据？ 然后我启用ssl-mod

• “尝试服务目录：”Nagios通过httpd错误日志抛出错误
• 在Mac OS X上更改_www apache2用户的$ PATH
• 无法查看存储在Linuxnetworking服务器上安装的networking驱动器上的图像
• mod_jk与Tomcat 6和HTTPauthentication
• 在aswtates更新速度缓慢

 # a2enmod ssl # /etc/init.d/apache2 restart 

我以这种方式修改/ etc / apache2 / sites-available / default-ssl（我把端口8080，因为我需要端口443用于另一个目的）：

 <VirtualHost *:8080> SSLEngine on SSLCertificateFile /etc/apache2/ssl/apache.pem SSLCertificateKeyFile /etc/apache2/ssl/apache.pem ServerAdmin webmaster@localhost DocumentRoot /var/www <Directory /> Options Indexes FollowSymLinks AllowOverride All </Directory> <Directory /var/www/> Options Indexes FollowSymLinks MultiViews AllowOverride All Order allow,deny allow from all </Directory> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Order allow,deny Allow from all </Directory> ErrorLog ${APACHE_LOG_DIR}/error.log # Possible values include: debug, info, notice, warn, error, crit, # alert, emerg. LogLevel warn CustomLog ${APACHE_LOG_DIR}/access.log combined Alias /doc/ "/usr/share/doc/" <Directory "/usr/share/doc/"> Options Indexes MultiViews FollowSymLinks AllowOverride None Order deny,allow Deny from all Allow from 127.0.0.0/255.0.0.0 ::1/128 </Directory> </VirtualHost> <VirtualHost *:8080> DocumentRoot /home/user1/public_html/ ServerName first.server.org # Other directives here </VirtualHost> <VirtualHost *:8080> DocumentRoot /home/user2/public_html/ ServerName second.server.org # Other directives here </VirtualHost> 

我必须指出，相同的configuration在http上工作（这是/ etc / apache2 / sites-available / default的副本，有一些不同 – > port和ssl支持）。 我的/etc/apache2/ports.conf如下：

 # If you just change the port or add more ports here, you will likely also # have to change the VirtualHost statement in # /etc/apache2/sites-enabled/000-default # This is also true if you have upgraded from before 2.2.9-3 (ie from # Debian etch). See /usr/share/doc/apache2.2-common/NEWS.Debian.gz and # README.Debian.gz #NameVirtualHost *:80 Listen 80 <IfModule mod_ssl.c> # If you add NameVirtualHost *:443 here, you will also have to change # the VirtualHost statement in /etc/apache2/sites-available/default-ssl # to <VirtualHost *:443> # Server Name Indication for SSL named virtual hosts is currently not # supported by MSIE on Windows XP. #NameVirtualHost *:8080 Listen 8080 </IfModule> <IfModule mod_gnutls.c> Listen 8080 </IfModule> 

任何build议？

 SSLCertificateFile /etc/apache2/ssl/apache.pem SSLCertificateKeyFile /etc/apache2/ssl/apache.pem 

 SSLCertificateFile /etc/apache2/ssl/exported-pem.crt SSLCertificateKeyFile /etc/apache2/ssl/exported-pem.key