apache 配置安装ssl证书实现https安全访问全过程

<VirtualHost _default_:443>
  SSLEngine on
  ServerName www.7428.cn:443
  SSLCertificateFile "${SRVROOT}/conf/ssl/214329625123456.pem"
  SSLCertificateKeyFile "${SRVROOT}/conf/ssl/214329625 123456.key"
php_admin_value open_basedir "${SRVROOT}/htdocs/ www7428cn;C:/windows/TEMP"
  DocumentRoot "${SRVROOT}/htdocs/www7428cn"
  ErrorDocument 404 "/404/"
# DocumentRoot access handled globally in httpd.conf
# CustomLog "${SRVROOT}/logs/ssl_request.log"
#          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
<Directory "${SRVROOT}/htdocs/7428cnwww">
# Options Indexes Includes FollowSymLinks
Options Includes FollowSymLinks
AllowOverride AuthConfig Limit FileInfo
    Require all granted
</Directory>
</virtualhost>
<VirtualHost _default_:443>
  SSLEngine on
  ServerName 7428.cn:443
  SSLCertificateFile "${SRVROOT}/conf/ssl/214329625 123456.pem"
  SSLCertificateKeyFile "${SRVROOT}/conf/ssl/214329625 123456.key"
 <IfModule rewrite_module>
    RewriteEngine On
    RewriteCond %{http_host} ^7428.cn [NC]
    RewriteRule ^(.*)$ https://www.7428.cn/$1 [L,R=301]
    </IfModule>
php_admin_value open_basedir "${SRVROOT}/htdocs/ www7428cn;C:/windows/TEMP"
  DocumentRoot "${SRVROOT}/htdocs/ www7428cn"
  ErrorDocument 404 "/404/"
# DocumentRoot access handled globally in httpd.conf
# CustomLog "${SRVROOT}/logs/ssl_request.log"
#          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
<Directory "${SRVROOT}/htdocs/ www7428cn">
# Options Indexes Includes FollowSymLinks
Options Includes FollowSymLinks
AllowOverride AuthConfig Limit FileInfo
    Require all granted
</Directory>
</virtualhost>

ErrorDocument 是配置找不到页面的时候跳转的404页面信息。

#LoadModule ssl_module modules/mod_ssl.so (如果找不到请确认是否编译过 openssl 插件)
#Include conf/extra/httpd-ssl.conf

# 添加 SSL 协议支持协议，去掉不安全的协议
SSLProtocol all -SSLv2 -SSLv3
# 修改加密套件如下
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
SSLHonorCipherOrder on
# 证书公钥配置
SSLCertificateFile cert/public.pem
# 证书私钥配置
SSLCertificateKeyFile cert/214486743260863.key
# 证书链配置，如果该属性开头有 '#'字符，请删除掉
SSLCertificateChainFile cert/chain.pem