yum -y install mod_ssl

rm -f localhost.key
openssl genrsa 1024 > localhost.key #生成新的localhost.key

rm -rf localhost.crt   #删除原来的证书

openssl req -new -x509 -days 365 -key ../private/localhost.key -out localhost.crt #生产新文件夹

iptables -I INPUT -p TCP –dport 443 -j ACCEPT
或
iptables -I INPUT -p TCP –dport 443 -j ACCEPT

RewriteEngine on
RewriteBase /
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [L,R] 

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/?(.*)$ https://%{SERVER_NAME}/$1 [L,R]

SSLPassPhraseDialog  builtin
SSLSessionCache         shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout  300
SSLMutex default
SSLRandomSeed startup file:/dev/urandom  256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW:!RC4:<VirtualHost _default_:443>     # 必须有一个虚拟主机，这样才可以使用跳转功能和使用443端口访问
DocumentRoot "/home/store/www"
ServerName www.zyin8.com:443  #DirectoryIndex index.html index.php  index.html.var
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine onSSLProtocol all -SSLv2SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW:!RC4:
SSLCertificateFile /etc/httpd/conf/cert/2_www.zyin8.com.crt #证书
SSLCertificateKeyFile /etc/httpd/conf/cert/3_www.zyin8.com.key #秘钥SSLCertificateChainFile /etc/httpd/conf/cert/1_root_bundle.crt #链接</VirtualHost>