ssl apache nginx configuration

http://articles.slicehost.com/2010/1/11/managing-ssl-certificates-1
http://articles.slicehost.com/2010/1/11/managing-ssl-certificates-2
Nginx SSL 實務
SSL Certificate Installation in Nginx
Configuring HTTPS servers

ssl 設定的file 有三種 伺服器憑證, 中繼憑證, RSA key
各種web server 吃的方式不同

Nginx 設定

listen  ip.address:443; #監聽HTTPS, 通常是Port 443
ssl  on;
ssl_certificate  /path/to/server.crt; 
ssl_certificate_key  /path/to/private.key; #這是伺服器用的RSA Key


#server.crt要用發下來的伺服器憑證與中繼憑證合併產生:
cat domain_name.crt ca_bundle.crt  > server.cr

SSLCertificateFile /etc/ssl/apache_ca.crt      #這是伺服器憑證
SSLCertificateKeyFile /etc/ssl/www.goyou.com.tw.key   
SSLCertificateChainFile /etc/ssl/chain.crt    #中繼憑證