apache整合tomato并实现ssl

  1. 1. LAMP
  2. 2. 安装mod_jk
    1. 2.1. windows
    2. 2.2. Linux
      1. 2.2.1. 安装依赖
      2. 2.2.2. 进入native
  3. 3. 配置
    1. 3.1. 新建workers.properties配置文件
    2. 3.2. 编辑workers.properties配置文件
    3. 3.3. 配置apache加载workers.properties配置文件
    4. 3.4. 为Apche新建虚拟机

老规矩,废话不表,直接干。

名称 含义
${Apache} Apache的安装目录
${tomcat} tomcat的安装目录

LAMP

此步骤不再详述

安装mod_jk

windows

下载地址:

http://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/windows/

复制到

1
${Apache}/modules/mod_jk.so

加载:

1
LoadModule jk_module modules/mod_jk.so

Linux

http://tomcat.apache.org/download-connectors.cgi

1
wget http://mirrors.hust.edu.cn/apache/tomcat/tomcat-connectors/jk/tomcat-connectors-1.2.43-src.tar.gz

安装依赖

1
sudo yum -y install autoconf libtool apr-util-devel httpd-devel

进入native

1
2
3
./buildconf.sh
./configure --with-apxs=/usr/bin/apxs
sudo make && make install

配置

新建workers.properties配置文件

1
touch ${Apache}/conf/workers.properties

编辑workers.properties配置文件

1
2
3
4
5
worker.list=one

worker.one.port=8009
worker.one.host=localhost
worker.one.type=ajp13

8009端口为tomcat的默认ajp13端口,可以在${tomcat}/conf/server.xml的“protocol=”AJP/1.3””查看

配置apache加载workers.properties配置文件

1
2
JKWorkersFile conf/workers.properties
JkLogFile logs/mod_jk.log

为Apche新建虚拟机

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
<VirtualHost *:80>
ServerName www.test.com
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule ^(.*)$ https://www.test.com$1 [R=301,L]
</IfModule>
</VirtualHost>
<VirtualHost *:443>

SSLEngine on
# 添加 SSL 协议支持协议,去掉不安全的协议
SSLProtocol all -SSLv2 -SSLv3
# 修改加密套件如下
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
SSLHonorCipherOrder on
# 证书公钥配置
SSLCertificateFile /etc/httpd/cert/www.test.com/apache/public.pem
# 证书私钥配置
SSLCertificateKeyFile /etc/httpd/cert/www.test.com/apache/123456789.key
# 证书链配置,如果该属性开头有 '#'字符,请删除掉
SSLCertificateChainFile /etc/httpd/cert/www.test.com/apache/chain.pem

ServerName www.test.com

JkMount /* one
</VirtualHost>