http -> https 적용법

ssl 인증서 생성

yum install -y mod_ssl openssl

openssl genrsa -out ca.key 2048  개인키 생성

openssl req -new -key ca.key -out ca.csr  CSR인증요청서 생

openssl x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt 개인키,csr 병합

서버 인증서 설치
cp ca.crt /etc/pki/tls/certs
cp ca.key /etc/pki/tls/private
cp ca.csr /etc/pki/tls/private

apache https리디렉션

80포트에서 443으로 강제 리디렉션

vi /etc/htpd/conf.d/linux.vm.conf

기존 파일

<Virtualhost *:80>
        ServerName www.linux.vm
        ServerAlias linux.vm
        DocumentRoot /var/www/html
</Virtualhost>

-----------------------------
변경 후

<Virtualhost *:443>
        ServerName www.linux.vm
        ServerAlias linux.vm
        DocumentRoot /var/www/html
        SSLEngine on
        SSLCertificateFile /etc/pki/tls/certs/ca.crt
        SSLCertificateKeyFile /etc/pki/tls/private/ca.key
</Virtualhost>
<Virtualhost *:80>
        ServerName www.linux.vm
        ServerAlias linux.vm
        DocumentRoot /var/www/html
        RewriteEngine on
        RewriteCond %{HTTPS} off
        RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
</Virtualhost>