Módulo SSL en Apache 2.4

Habilitar módulo SSL

sudo a2enmod ssl
sudo a2enmod headers

Generar certificado autofirmado

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt

Configurar virtual host para acceso seguro

                       /etc/apache2/sites-available/default-ssl.conf
<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
                ServerAdmin your_email@example.com
                ServerName server_domain_or_IP

                DocumentRoot /var/www/html

                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined

                SSLEngine on

                SSLCertificateFile      /etc/ssl/certs/apache-selfsigned.crt
                SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key

                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>

        </VirtualHost>
</IfModule>

Desactivar SSLv2 e SSLv3 (opcional)

Podemos desactivar as versións 2 e 3 de SSL por estar obsoletas:

SSLProtocol all -SSLv2 -SSLv3

Reiniciar servicio

sudo systemctl restart apache2

Uso

Acceder por https: https://server_domain_or_IP

Referencias

• https://httpd.apache.org/docs/trunk/es/mod/mod_ssl.html
• https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-18-04