远程协助
当前位置:首页>>文档中心>>操作系统
标题:构建安全的e-commerce服务器(3)_Windows教程重庆电脑外包    日期:2019-12-03 02:03:13
面是一些要检查的安全设置:

 SSL:

在httpd.conf中打开SSL

Port 80

Listen 80

Listen 443

SSLSessionCache dbm:/usr/local/apache/ logs/ssl_scache

SSLSessionCacheTimeout 1200

# For increased performance use "SSLMutex sem" instead of the line below

SSLMutex file:/usr/local/apache/logs/ssl_mutex

SSLLog /usr/local/apache/logs/ssl_engine_log

# change the log level default from "info" to "warn"

SSLLogLevel warn

SSLOptions +OptRenegotiate

 打开虚拟主机的SSL支持:

# Within the ...

SSLEngine on

# Replace with certificate file name

SSLCertificateFile /usr/local/apache/conf/ssl.

cert/

# Replace with key file name

SSLKeyFile /usr/local/apache/conf/ssl.key/

SSLVerifyClient none

 定制SSL的LOG格式:

LogFormat clfa "%h %l %u %t "%r" %>s %b %{SSL_PROTOCOL}x  %{SSL_CIPHER}x "%{SSL_CLIENT_S_DN_CN}x""

CustomLog /usr/local/apache/logs/access_log clfa

 被保护的目录:

SSLCipherSuite HIGH: MEDIUM

AuthType Digest

AuthName "Beta code testing"

AuthDigestDomain /test/ http://test.my.dom/beta/

AuthDigestFile /usr/local/apache/conf/

digest_pw

Require valid-user

重庆监控安防重庆监控安防
下一篇:“终端服务器超出了最大允许连接数”的解决方法汇总_Windows教程重庆电脑外包

联系我们
  • 客服热线:023-63522929(7 x 24h)
  • 在线客服:
  • 微信公众号 官方微博