宝塔面板一个网站绑定两个域名配置SSL

宝塔面板一个网站绑定两个以上的域名配置SSL

1、比如a.com b.com c.com 同时绑定一个网站

2、申请证书，获取pem、key

3、开启a.com 的ssl

4、点击左侧配置文件

1. <VirtualHost *:80>
2. ServerAdmin webmaster@example.com
3. DocumentRoot "/www/wwwroot/test.com/public"
4. ServerName 7277db5a.test.com
5. ServerAlias a.com b.com c.com
6. #errorDocument 404 /404.html
7. ErrorLog "/www/wwwlogs/test.com-error_log"
8. CustomLog "/www/wwwlogs/test.com-access_log" combined
10. #DENY FILES
11. <Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
12. Order allow,deny
13. Deny from all
14. </Files>
16. #PHP
17. <FilesMatch \.php$>
18. SetHandler "proxy:unix:/tmp/php-cgi-74.sock|fcgi://localhost"
19. </FilesMatch>
21. #PATH
22. <Directory "/www/wwwroot/test.com/public">
23. SetOutputFilter DEFLATE
24. Options FollowSymLinks
25. AllowOverride All
26. Require all granted
27. DirectoryIndex index.php index.html index.htm default.php default.html default.htm
28. </Directory>
29. </VirtualHost>
30. <VirtualHost *:443>
31. ServerAdmin webmasterexample.com
32. DocumentRoot "/www/wwwroot/test.com/public"
33. ServerName SSL.abc.com
34. ServerAlias a.com
35. #errorDocument 404 /404.html
36. ErrorLog "/www/wwwlogs/test.com-error_log"
37. CustomLog "/www/wwwlogs/test.com-access_log" combined
39. #SSL
40. SSLEngine On
41. SSLCertificateFile /www/server/panel/vhost/cert/a.com/fullchain.pem
42. SSLCertificateKeyFile /www/server/panel/vhost/cert/a.com/privkey.pem
43. SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
44. SSLProtocol All -SSLv2 -SSLv3 -TLSv1
45. SSLHonorCipherOrder On
47. #PHP
48. <FilesMatch \.php$>
49. SetHandler "proxy:unix:/tmp/php-cgi-74.sock|fcgi://localhost"
50. </FilesMatch>
53. #DENY FILES
54. <Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
55. Order allow,deny
56. Deny from all
57. </Files>
59. #PATH
60. <Directory "/www/wwwroot/test.com/public">
61. SetOutputFilter DEFLATE
62. Options FollowSymLinks
63. AllowOverride All
64. Require all granted
65. DirectoryIndex index.php index.html index.htm default.php default.html default.htm
66. </Directory>
67. </VirtualHost>

5、可以看到<VirtualHost *:443>标签内只配置了a.com的ssl证书。复制此标签内容，配置 b.com 和 c.com （其他部分省略） 需要改变的就三行

1. <VirtualHost *:443>
2. ...
3. ServerAlias a.com
4. ...
5. SSLCertificateFile /www/server/panel/vhost/cert/a.com/fullchain.pem
6. SSLCertificateKeyFile /www/server/panel/vhost/cert/a.com/privkey.pem
7. ...
8. </VirtualHost>

把B、C相应的证书放到 /www/server/panel/vhost/cert/*****.com/fullchain.pem  、 /www/server/panel/vhost/cert/*****.com/privkey.pem

点击保存。

注：配置好后就可以正常访问 htttps://a.com  htttps://b.com  htttps://c.com

不要再点击ssl里面的部署按钮，否则会覆盖你刚编辑保存的配置文件。

因此最好把配置文件的内容复制下来保存一份，防止以后误操作覆盖