ssl - 如何为 Apache2 和 Jetty 服务器启用 SSL

Question

<分区>

Answer 1

这里有一个很好的如何使用 https 配置 apache2。 http://mrfoo.de/archiv/347-Howto-Apache2-SSL-Zertifikat-erstellen-und-aktivieren.html

Jetty可以用http运行(只要你用防火墙从外面屏蔽8080端口，然后用proxy pass把请求传递到http://:8080/

她是一个虚拟主机配置示例:

# Force HTTPS only (proxy to port 443)
<VirtualHost *:80>
    ServerName app.mydomain.lan
    RewriteEngine on
    ReWriteCond %{SERVER_PORT} !^443$
    RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
</VirtualHost>

# HTTPS requests Proxy to tomcat/jetty 
<VirtualHost *:443>
    ServerName app.mydomain.lan
    ServerSignature Off
    ProxyRequests Off
    SSLEngine On
    SSLCertificateKeyFile /etc/apache2/myssl/server.cert.key
    SSLCertificateFile /etc/apache2/myssl/server.cert.crt

    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    ProxyPass / http://127.0.0.1:8080/ retry=1
    ProxyPassReverse / http://127.0.0.1:8080/
    ProxyVia On
</VirtualHost>