我的SSLconfiguration现在没有工作。 我只是从一台主机移动一个站点(我移动了证书文件。
当我尝试访问我有这个错误。 (Chrome和Firefox对我说,SSL协议是无效的)
解决:最后我忘记了启用该网站:(对不起,感谢与SSLconfiguration的帮助。
我在我的apache日志中看到这个(我认为这是当我进入我的http路由)
[09/Apr/2016:16:54:05 +0000] "GET /homepage/ HTTP/1.1" 302 560 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.110 Safari/537.36"
在这里我的SSL虚拟主机文件在网站启用 (我把名字网站replace到我的网站):
在响应后编辑: – 评论SSLCertificateChainFile行。
来自ssl虚拟主机的ErrorLog更改为/home/my-site/logs/my-site.com-error-ssl.log
LogLevel设置为debugging
来自ssl虚拟主机的CustomLog已更改为/home/my-site/logs/my-site.com.com-access-ssl.log
新的日志文件丢失,我真的不能看到任何SSL错误。 我也testing了ssl模块已启用
在Chrome中testing普通和私有会话结果相同
非SSL
<VirtualHost *:80> ServerAdmin [email protected] ServerName my-site.com ServerAlias www.my-site.com DocumentRoot /home/my-site/www/my-site.com/current/public/ <Directory /> Options FollowSymLinks AllowOverride None </Directory> <Directory /home/my-site/www/my-site.com/current/public/ > Options Indexes FollowSymLinks MultiViews AllowOverride All Require all granted </Directory> ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ <Directory "/usr/lib/cgi-bin"> AllowOverride None Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch Require all granted </Directory> ErrorLog /home/my-site/logs/my-site.com-error.log LogLevel warn CustomLog /home/my-site/logs/my-site.com.com-access.log combined Alias /doc/ "/usr/share/doc/" <Directory "/usr/share/doc/"> Options Indexes MultiViews FollowSymLinks AllowOverride None Require all denied Allow from 127.0.0.0/255.0.0.0 ::1/128 </Directory> </VirtualHost>
SSL
<IfModule mod_ssl.c>
ServerAdmin [email protected] ServerName my-site.com ServerAlias www.my-site.com DocumentRoot /home/my-site/www/my-site.com/current/public
<Directory /home/my-site/www/my-site.com/current/public > Allow from All Require all granted Options FollowSymLinks AllowOverride All </Directory> ErrorLog /home/my-site/logs/my-site.com-error-ssl.log LogLevel debug CustomLog /home/my-site/logs/my-site.com.com-access-ssl.log combined SSLEngine on SSLCertificateFile /home/my-site/www/my-site.com/current/ssl/www.my-site.com.crt SSLCertificateKeyFile /home/my-site/www/my-site.com/current/ssl/www.my-site.com.key #SSLCertificateChainFile /home/my-site/www/my-site.com/current/ssl/my-site.com.crt SSLCACertificateFile /home/my-site/www/my-site.com/current/ssl/my-site.com.crt SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> <Directory /usr/lib/cgi-bin> SSLOptions +StdEnvVars </Directory> BrowserMatch "MSIE [2-6]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 # MSIE 7 and newer should be able to use keepalive BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
您将在日志中看到更多的debugging级警告
LogLevel debug
您在此处定义了两次CA证书:
SSLCertificateChainFile /home/my-site/www/my-site.com/current/ssl/sf_bundle_my-site.com.crt SSLCACertificateFile /home/my-site/www/my-site.com/current/ssl/sf_bundle_my-site.com.crt
链式证书文件可以包含根证书颁发者,中间受信任的颁发者和您的证书。 CA证书应该足够了,因为您是单独提及您自己的证书。
尝试注释掉SSLCertificateChainFile行。
并将您的httpsurl放入在线检查器中,以获得更好的错误报告