SSL证书是自己生成的，apache是正常启动的，别的页面都没问题，一运行到这个函数就这样了

[Thu Jan 21 16:31:21.051945 2021] [mpm_winnt:notice] [pid 10668:tid 616] AH00428: Parent: child process 5108 exited with status 3221225477 -- Restarting.
[Thu Jan 21 16:31:21.193566 2021] [ssl:warn] [pid 10668:tid 616] AH01906: localhost:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jan 21 16:31:21.193566 2021] [ssl:warn] [pid 10668:tid 616] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jan 21 16:31:21.224587 2021] [mpm_winnt:notice] [pid 10668:tid 616] AH00455: Apache/2.4.33 (Win32) OpenSSL/1.0.2o configured -- resuming normal operations
[Thu Jan 21 16:31:21.224587 2021] [mpm_winnt:notice] [pid 10668:tid 616] AH00456: Server built: Mar 17 2018 20:10:48
[Thu Jan 21 16:31:21.224587 2021] [core:notice] [pid 10668:tid 616] AH00094: Command line: 'D:\Robot\rampp\apache\bin\httpd.exe -d D:/Robot/rampp/apache'
[Thu Jan 21 16:31:21.227578 2021] [mpm_winnt:notice] [pid 10668:tid 616] AH00418: Parent: Created child process 16604
[Thu Jan 21 16:31:22.177567 2021] [ssl:warn] [pid 16604:tid 528] AH01906: localhost:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jan 21 16:31:22.179562 2021] [ssl:warn] [pid 16604:tid 528] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jan 21 16:31:22.422468 2021] [ssl:warn] [pid 16604:tid 528] AH01906: localhost:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Jan 21 16:31:22.422468 2021] [ssl:warn] [pid 16604:tid 528] AH01909: localhost:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jan 21 16:31:22.454377 2021] [mpm_winnt:notice] [pid 16604:tid 528] AH00354: Child: Starting 150 worker threads.

这个是apache 里 的报错log内容

@笑言: 这提示了，服务器上的证书与服务器名称不匹配，你这个证书在哪生成的啊。

@为乐而来: 本地使用OPENSSL命令行自己生成的证书然后放在apache目录下的文件夹内了

@笑言: 你配置SSL的地方，应该是在httpd.conf配置文件，看一下这个文件代码。。

@为乐而来: 我们是内网的程序，localhost要如何配置SSL证书？我们现在本地生成的可以HTTPS访问了，但是每次登录的时候都会提醒此站点不安全，这个问题也是因为证书的问题出现的吗？

@为乐而来: <VirtualHost default:443>
SSLEngine on
ServerName localhost
ServerAlias localhost
SSLCertificateFile "${SRVROOT}/conf/key/server.crt"
SSLCertificateKeyFile "${SRVROOT}/conf/key/server.key"

DocumentRoot "${SRVROOT}/htdocs"

DocumentRoot "${DOMNTROOT}"
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM
SSLProxyEngine on
ProxyRequests Off
ProxyPass /wss ws://localhost:12312
ProxyPassReverse /wss wss://localhost/wss
ProxyPass /robotvideo/ http://localhost:10001/
ProxyPassReverse /robotvideo/ http://localhost:10001/

DocumentRoot access handled globally in httpd.conf

CustomLog "${SRVROOT}/logs/ssl_request.log" \
      "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
<Directory "${DOMNTROOT}">
	Options Indexes Includes FollowSymLinks
	AllowOverride AuthConfig Limit FileInfo
Require all granted
</Directory>

</virtualhost>

已经解决了？
本地生成的SSL证书浏览器都不认可的，你要去专门SSL证书颁发机构购买，
常用的SSL证书机构：Symantec、Geotrust、GlobalSign,Comodo以及RapidSSL
你可以点击网站地址栏左边的符号查看证书，比如博客园用的是RapidSSL，百度用的是GlobalSign
他们的证书浏览器才认可，阿里云百度云腾讯云平台都可以购买SSL证书的。。

@为乐而来: 网上那个不是域名的吗？局域网的项目也要去吗？

@笑言: 局域网也没必要加HTTPS啊。。。你非要搞，每台电脑都安装一下这个证书。。。

@为乐而来: 甲方要求，必须要搞这个。但是按了证书还是提示这个啊

@为乐而来: 额，这个和openssl_private_decrypt（）函数用不了有什么关系吗

@笑言: 你确定你手动导入了证书么。。。
这是chrome到入证书的方式：https://jingyan.baidu.com/article/c843ea0bc4142a77921e4a79.html
你自己看一下吧。

@为乐而来: 啊，之前没注意，证书过期了。。