继wingger那篇SSL文献后，我把虚拟机的那段代码写上。

squall1

供大家参考。

# vi /usr/local/apache/conf/ssl.conf
在</VirtualHost>;和</IfDefine>;中间加：

<VirtualHost 192.168.0.12:443>;
DocumentRoot "/home/squall"
DirectoryIndex index.php index.jsp index.cgi index.htm index.html
ServerName www.squall.net:443
ServerAdmin webmaster@squall.net
ErrorLog /usr/local/apache/logs/www.squall.net-error_log
TransferLog /usr/local/apache/logs/www.squall.net-access_log

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt

SSLCertificateKeyFile /usr/local/apache/conf/ssl.crt/server.key

SSLCACertificatePath /usr/local/apache/conf/ssl.crt
SSLCACertificateFile /usr/local/apache/conf/ssl.crt/cacert.pem

SSLVerifyClient require
SSLVerifyDepth  1

<Files ~ "\.(cgi|shtml|phtml|php3?)$">;
    SSLOptions +StdEnvVars
</Files>;
<Directory "/home/squall/cgi-bin">;
    SSLOptions +StdEnvVars
</Directory>;

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog /usr/local/apache/logs/ssl_request_log \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>;

#vi /usr/local/apache/conf/httpd.conf

NameVirtualHost 192.168.0.12:80
<VirtualHost 192.168.0.12:80>;
    ServerAdmin webmaster@squall.net
    DocumentRoot /home/squall
    DirectoryIndex index.php index.htm index.html
    ServerName www.squall.net
    ErrorLog logs/www.squall.net-error_log
    CustomLog logs/www.squall.net-access_log common
</VirtualHost>;

效果如图：