<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>DevOps技术分享 &#187; HTTPS</title>
	<atom:link href="http://www.showerlee.com/archives/tag/https/feed" rel="self" type="application/rss+xml" />
	<link>http://www.showerlee.com</link>
	<description>与你共同学习运维开发</description>
	<lastBuildDate>Mon, 19 Oct 2020 05:51:41 +0000</lastBuildDate>
	<language>zh-CN</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.6</generator>
		<item>
		<title>Apache中多个HTTPS虚拟主机的实现</title>
		<link>http://www.showerlee.com/archives/825</link>
		<comments>http://www.showerlee.com/archives/825#comments</comments>
		<pubDate>Sat, 31 Aug 2013 13:57:01 +0000</pubDate>
		<dc:creator>showerlee</dc:creator>
				<category><![CDATA[APACHE]]></category>
		<category><![CDATA[HTTPS]]></category>

		<guid isPermaLink="false">http://www.showerlee.com/?p=825</guid>
		<description><![CDATA[要实现一个Apache服务器上提供多个SSL虚拟主机， 可以： * 使用多域名SSL证书，可以实现一个IP，一 [&#8230;]]]></description>
				<content:encoded><![CDATA[<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="font-family:SimSun;color:#666666;font-size:14px;">要实现</span><span style="font-family:SimSun;font-weight:bold;color:#666666;font-size:14px;">一个Apache服务器上提供多个SSL虚拟主机</span><span style="font-family:SimSun;color:#666666;font-size:14px;">，</span>
</p>
<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="color:#666666;font-family:SimSun;font-size:14px;">可以：</span>
</p>
<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="color:#666666;font-family:SimSun;font-size:14px;">* 使用多域名SSL证书，可以实现一个IP，一个443端口上多个SSL虚拟主机；</span>
</p>
<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="color:#666666;font-family:SimSun;font-size:14px;">* 一个ip，为所有SSL虚拟主机配置单独的端口。比如，默认的虚拟主机使用443，其他的使用8080或8081等，且每个SSL虚</span><span style="color:#666666;font-family:SimSun;font-size:14px;">拟主机必须独占一个端口；</span>
</p>
<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="color:#666666;font-family:SimSun;font-size:14px;">* 为Apache服务器配置多个IP，每个SSL虚拟主机独占IP。如果只有一张物理网卡，可以配置为网卡配置子接口；</span>
</p>
<p style="color:#555555;font-family:宋体, 'Arial Narrow', arial, serif;font-size:14px;background-color:#FFFFFF;">
	<span style="color:#666666;font-family:SimSun;font-size:14px;">* 使用mod_gnutls模块，创建多个SSL虚拟主机&nbsp;</span>
</p>
<p>
	
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-weight:bold;"><br />
</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-weight:bold;font-size:14px;">1. Apache中同一IP多个<a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>虚拟主机的实现</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">在 Apache 文档中提到，不能在单个 IP 上同时有多个按名字识别的虚拟主机("named virtual host")。不完全是这样。</span>
</p>
<p><span><span style="color:#666666;font-family:SimSun;"> </p>
<p>
	
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>协议的过程是：服务器首先与客户机之间进行服务器身份验证并协商安全会话，然后，客户端向服务器发送 HTTP 请求。这样一来，在客户端开始发送HTTP请求之前，服务器就已经把证书发给了客户端（客户端根据本地的根证书去验证证书链，等等）。而最重要的是，为了表明身份，这个证书的"Common Name"填写的应该是域名，否则浏览器会给出警告。</span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;">既然在这个过程中，客户端就所访问的域名所处的地位是"被告知"的地位，因此，客户端再发出的 Host: 请求头也就显得不那么有意义了。另一方面，如果客户请求的域名与Common Name不符，浏览器也会给出警告。至少，在表面上看是这样。</span>
</p>
<p></span> </span> </p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">不过，对于自行签署的证书，以及一些发证机构而言，其实还可以签署一种普适<a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>证书，这种证书的</span></span><span style="color:#666666;font-family:SimSun;font-size:14px;">Common Name</span><span><span style="color:#666666;font-family:SimSun;font-size:14px;">一栏是 *.domain.tld 这样的形式，即其主机名部分可以是任意字符串，而只有域名部分是确定的。</span><br />
<span style="color:#666666;font-family:SimSun;font-size:14px;">当然，这种证书的安全性有一定的负面影响：由于一个证书可以验证整个域下面的所有服务器，一旦其被破解，则所有加密通讯也就同时失密了（当然，可以每台服务器使用自己的单独的证书），不过这个问题并不是太严重，通常还算是尚可接受的范围。另一个潜在的影响是，某些手机上运行的浏览器不能正确处理这种证书，不过这个问题仅限于希望给手机提供服务的网站。</span><br />
<span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;">因此，简而言之，符合这样几个条件的前提下，是可以在同一个IP上部署多个<a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>虚拟主机的：</span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">a) 这些虚拟主机是同属于同一域名的子域名&nbsp;</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">b) 拥有普适证书&nbsp;</span></span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;font-size:14px;">c) 正确地配置Apache。</span><br />
<span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span><span style="color:#666666;font-size:14px;font-family:SimSun;">如果</span><span style="font-weight:bold;color:#666666;font-family:SimSun;font-size:14px;">要在一个IP地址上需要部署多个SSL网站</span><span style="color:#666666;font-family:SimSun;font-size:14px;">，</span></span>
</p>
<p>
	<span><span style="color:#FF0000;"><span style="color:#666666;font-family:SimSun;font-size:14px;">（1）</span><span style="color:#666666;font-family:SimSun;font-size:14px;">一种方法</span></span><span style="color:#666666;font-family:SimSun;font-size:14px;">：如果要</span><span style="color:#666666;font-family:SimSun;font-size:14px;">在同一个IP地址的443端口上部署多个网站，必须保证这些网站的域名都能匹配相同的一张SSL证书。</span><span style="color:#666666;font-family:SimSun;font-size:14px;">这是因为</span><span style="color:#666666;font-family:SimSun;font-size:14px;">SSL握手协议</span><span style="color:#666666;font-family:SimSun;font-size:14px;">过程中,是</span><span style="color:#666666;font-family:SimSun;font-size:14px;">通过IP+Port来进行通信，一个IP的一个端口只能返给客户一张SSL证书（即使有多张证书，也只能返回第一张，因为无法分辨用户会需要返回哪张证书），如果这张证书能够满足这些网站的主机名匹配要求（访问b.test.com时，使用a.test.com段的证书，证书中包含a.test.com,于虚拟主机中的主机名之一匹配），就可以使用。</span><br />
<span style="color:#666666;font-family:SimSun;font-size:14px;">一般能匹配多个主机名的证书有通配符证书*.domain.com和多域名证书(www.domain.com,ftp.domain.com 等)，以下我们提供一个典型同一个IP上的多主机名部署配置，www.domain.com对应的根目录在WWW下，ftp.domain.com对应的根目录在FTP下，</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">当然，这种证书的安全性有一定的负面影响：由于一个证书可以验证整个域下面的所有服务器，一旦其被破解，则所有加密通讯也就同时失密了（当然，可以每台服务器使用自己的单独的证书），不过这个问题并不是太严重，通常还算是尚可接受的范围。另一个潜在的影响是，某些手机上运行的浏览器不能正确处理这种证书，不过这个问题仅限于希望给手机提供服务的网站。</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">因此，简而言之，符合这样几个条件的前提下，是可以在同一个IP上部署多个<a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>虚拟主机的：</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">a) 这些虚拟主机是同属于同一域名的子域名&nbsp;</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">b) 拥有普适证书&nbsp;</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">c) 正确地配置Apache。</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;font-size:14px;">如果</span><span style="font-weight:bold;color:#666666;font-family:SimSun;font-size:14px;">要在一个IP地址上需要部署多个SSL网站</span><span style="color:#666666;font-family:SimSun;font-size:14px;">，</span></span>
</p>
<p>
	<span style="color:#FF0000;"><span style="color:#666666;font-family:SimSun;font-size:14px;">（1）</span><span style="color:#666666;font-family:SimSun;font-size:14px;">一种方法</span></span><span style="color:#666666;font-family:SimSun;font-size:14px;">：如果要</span><span style="color:#666666;font-family:SimSun;font-size:14px;">在同一个IP地址的443端口上部署多个网站，必须保证这些网站的域名都能匹配相同的一张SSL证书。</span><span style="color:#666666;font-family:SimSun;font-size:14px;">这是因为</span><span style="color:#666666;font-family:SimSun;font-size:14px;">SSL握手协议</span><span style="color:#666666;font-family:SimSun;font-size:14px;">过程中,是</span><span style="color:#666666;font-family:SimSun;font-size:14px;">通过IP+Port来进行通信，一个IP的一个端口只能返给客户一张SSL证书（即使有多张证书，也只能返回第一张，因为无法分辨用户会需要返回哪张证书），如果这张证书能够满足这些网站的主机名匹配要求（访问b.test.com时，使用a.test.com段的证书，证书中包含a.test.com,于虚拟主机中的主机名之一匹配），就可以使用。</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">一般能匹配多个主机名的证书有通配符证书*.domain.com和多域名证书(www.domain.com,ftp.domain.com 等)，以下我们提供一个典型同一个IP上的多主机名部署配置，www.domain.com对应的根目录在WWW下，ftp.domain.com对应的根目录在FTP下，</span><span style="color:#666666;font-family:SimSun;font-size:14px;"><a href="http://www.domain.com" rel="nofollow">http://www.domain.com</a></span><span style="color:#666666;font-family:SimSun;font-size:14px;">与</span><span style="color:#666666;font-family:SimSun;font-size:14px;"><a href="http://ftp.domain.com" rel="nofollow">http://ftp.domain.com</a></span><span style="color:#666666;font-family:SimSun;font-size:14px;">使用相同的证书：</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">NameVirtualHost 11.22.33.44:443</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost 11.22.33.44:443&gt;</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">DocumentRoot "C:/Apache2.2/htdocs/www"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">ServerName <a href="http://www.domain.com" rel="nofollow">http://www.domain.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateFile "C:/Apache2.2/conf/server.cer"</span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateKeyFile "C:/Apache2.2/conf/server.key"</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost 11.22.33.44:443&gt;</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">DocumentRoot "C:/Apache2.2/htdocs/ftp"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">ServerName <a href="http://ftp.domain.com" rel="nofollow">http://ftp.domain.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateFile "C:/Apache2.2/conf/server.cer"</span>
</p>
<p>
	<span style="color:#666666;font-size:14px;font-family:SimSun;"><span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateKeyFile "C:/Apache2.2/conf/server.key"</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	<span><span style="color:#FF0000;"><span style="color:#666666;font-family:SimSun;"><br />
</span></span></span>
</p>
<p>
	<span><span style="color:#FF0000;"><span style="color:#666666;font-family:SimSun;font-size:14px;">（2）</span><span style="color:#666666;font-family:SimSun;font-size:14px;">另一种办法就是给每个网站分配不同的端口号</span></span><span style="color:#666666;font-family:SimSun;font-size:14px;">；</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost 11.22.33.44:443&gt;</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">DocumentRoot "C:/Apache2.2/htdocs/www"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">ServerName <a href="http://www.domain.com" rel="nofollow">http://www.domain.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateFile "C:/Apache2.2/conf/server.cer"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateKeyFile "C:/Apache2.2/conf/server.key"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost 11.22.33.44:</span><span style="color:#666666;font-family:SimSun;font-size:14px;">8443</span><span style="color:#666666;font-family:SimSun;font-size:14px;">&gt;</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">DocumentRoot "C:/Apache2.2/htdocs/ftp"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">ServerName <a href="http://ftp.domain.com" rel="nofollow">http://ftp.domain.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateFile "C:/Apache2.2/conf/server.cer"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">SSLCertificateKeyFile "C:/Apache2.2/conf/server.key"</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;"><br />
</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">基于域名的虚拟主机只能使用同一个证书，或者说，即使有不同的证书，最终使用的都是排在前面的默认的第一个</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-weight:bold;"><br />
</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-weight:bold;font-size:14px;">2. Apache中一张网卡绑定不同IP实现多个<a href="http://www.showerlee.com/archives/tag/https" title="查看HTTPS中的全部文章" class="tag_link">HTTPS</a>虚拟主机</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">一张网卡绑定多个ip，ifconfig eth0:0......</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost</span><span style="font-weight:bold;color:#666666;font-family:SimSun;font-size:14px;">&nbsp;220.181.75.109</span><span style="color:#666666;font-family:SimSun;font-size:14px;">:8443&gt;</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;ServerAdmin <a href="mailto:lala@corp.net.com">lala@corp.net.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;DocumentRoot /home/lala/apache/htdocs/test</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;ServerName a.test.com</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCertificateFile /home/lala/apache/conf/ssl.key/server.crt</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCertificateKeyFile /home/lala/apache/conf/ssl.key/server.key</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#Include /home/lala/apache/conf/ssl.conf</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#ErrorLog logs/dummy-a.test.com-error_log</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#CustomLog logs/a.test.com-access_log common</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;"><br />
</span></span>
</p>
<p>
	<span><span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;VirtualHost&nbsp;</span><span style="font-weight:bold;color:#666666;font-family:SimSun;font-size:14px;">220.181.75.65</span><span style="color:#666666;font-family:SimSun;font-size:14px;">:8443&gt;</span></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;ServerAdmin <a href="mailto:lala@corp.net.com">lala@corp.net.com</a></span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;DocumentRoot /home/lala/apache/htdocs/test2</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;ServerName d.test.com</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLEngine on</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCertificateFile /home/lala/apache/conf/ssl.key/server2.crt</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;SSLCertificateKeyFile /home/lala/apache/conf/ssl.key/server2.key</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#Include /home/lala/apache/conf/ssl.conf</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#ErrorLog logs/dummy-a.test.com-error_log</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&nbsp; &nbsp; &nbsp;#CustomLog logs/a.test.com-access_log common</span>
</p>
<p>
	<span style="color:#666666;font-family:SimSun;font-size:14px;">&lt;/VirtualHost&gt;</span>
</p>
<p>
	</p>
<div>声明: 本文采用 <a rel="external" href="http://creativecommons.org/licenses/by-nc-sa/3.0/deed.zh" title="署名-非商业性使用-相同方式共享 3.0 Unported">CC BY-NC-SA 3.0</a> 协议进行授权</div><div>转载请注明来源：<a rel="external" title="DevOps技术分享" href="http://www.showerlee.com/archives/825">DevOps技术分享</a></div><div>本文链接地址：<a rel="external" title="Apache中多个HTTPS虚拟主机的实现" href="http://www.showerlee.com/archives/825">http://www.showerlee.com/archives/825</a></div>]]></content:encoded>
			<wfw:commentRss>http://www.showerlee.com/archives/825/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
