1. 首先得到证书，收费也好，免费也好。
2. 防火墙
   
   1 2 3

   firewall-cmd --list-all firewall-cmd --permanent --zone=public --add-port=443/tcp firewall-cmd --reload

   
    
3. yum -y install mod_ssl  安装ssl模块
4. vim /etc/httpd/conf/httpd.conf 修改
   
   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

   LoadModule ssl_module modules/mod_ssl.so ...... <Directory />     AllowOverride none     Require all denied </Directory> ------------->改成 <Directory />     AllowOverride ALL     Require all granted     Order Deny,Allow     Allow from all </Directory> ....... Include conf/httpd-ssl.conf

   
    
5. 产生https的配置文件: vim /etc/httpd/conf/httpd-ssl.conf
   
   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34

   普通: <VirtualHost 0.0.0.0:443>     DocumentRoot "/var/www/html"     ServerName www.xxxxxx.com     SSLEngine on     SSLCertificateFile /etc/httpd/conf/xxxxxx.crt     SSLCertificateKeyFile /etc/httpd/conf/xxxxxx.key     SSLCertificateChainFile /etc/httpd/conf/xxxxx.crt </VirtualHost> 负载: <VirtualHost *:443>     ServerName www.xxxxxx.com     SSLEngine on     SSLCertificateFile /etc/httpd/conf/xxx.crt     SSLCertificateKeyFile /etc/httpd/conf/xxx.key     SSLCertificateChainFile /etc/httpd/conf/xxx.crt          ErrorLog "logs/acooly2.org-error_log"     LogFormat "%{Host}i %h %l %u %t \"%r\" %s %b" vcommon     CustomLog logs/access_log vcommon       ProxyRequests Off     ProxyPreserveHost on     # apache+tomcat cluster     ProxyPass / balancer://tomcat-cluster/ stickysession=JSESSIONID|jsessionid nofailover=Off     ProxyPassMatch ^/(ws(/.*)?)$ balancer://tomcat-cluster/ stickysession=JSESSIONID|jsessionid nofailover=Off     #ProxyPass / balancer://tomcat-cluster/ nofailover=Off     ProxyPassReverse / balancer://tomcat-cluster/     <Proxy balancer://tomcat-cluster/>       BalancerMember ajp://IP1:8009 loadfactor=1 route=APP1       BalancerMember ajp://IP2:8009 loadfactor=1 route=APP2       ProxySet lbmethod=bybusyness     </Proxy> </VirtualHost>

   
    
6. 开启访问80 端口自动跳转443: vim /etc/httpd/conf/httpd.conf
   
   1 2 3 4 5 6 7

   vim /etc/httpd/conf/httpd.conf LoadModule rewrite_module modules/mod_rewrite.so #在末尾追加 RewriteEngine on #301表示永久移走 RewriteRule ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L] #同时注释掉非https的配置: Include conf/httpd-vhosts.conf

   
    
7. 重启: systemctl restart httpd.service

这样，访问http的时候，也会自动跳转到https方式