我正在尝试为我的网站设置SSL。在我的Apache网站托管文件中,我正在使用:
SSLEngine On
SSLCertificateFile /etc/ssl/localcerts/www.website.com.crt
SSLCertificateKeyFile /etc/ssl/localcerts/www.website.com.key
SSLVerifyClient require
SSLVerifyDepth 1
SSLCACertificateFile /etc/ssl/localcerts/ca-client.pem
Run Code Online (Sandbox Code Playgroud)
重新启动Apache时出现以下错误消息:
* Restarting web server apache2 [fail]
* The apache2 configtest failed.
Output of config test was:
AH00526: Syntax error on line 25 of /etc/apache2/sites-enabled/website.com.conf:
SSLCACertificateFile takes one argument, SSL CA Certificate file ('/path/to/file' - PEM encoded)
Action 'configtest' failed.
The Apache error log may have more information.
Run Code Online (Sandbox Code Playgroud)
如果我将SSLCACertifcateFile行注释掉,则该网站可以正常运行。如预期的那样,没有CACertificate的SSL是“不受信任的”。
我如何调试它以弄清楚为什么不能包含SSLCACertificateFile?错误是什么意思?