營運學習筆記Apache服務

標籤：apache

Apache HTTP SERVER

Apache軟體基金會的一個開放原始碼的網頁伺服器軟體

curl -I 查看網站的網頁伺服器類型

實驗測試之前注意向發起訪問請求的主機添加網域名稱解析/etc/host

一、安裝httpd

yum install httpd

systemctl start httpd

systemctl enable httpd #開機啟動

firewall-cmd  --permanent --add-service=http #將http服務添加至防火牆列表中

firewall-cmd  --reload

firewall-cmd  --permanent --add-service=https #將https服務添加至防火牆列表中

firewall-cmd  --reload

修改http的主設定檔修改預設設定

/etc/httpd/conf/httpd.conf

42 Listen 80#修改http服務的預設網路連接埠

119 DocumentRoot "/www/html"#修改http服務的預設發布目錄

120 <Directory "/www/html">

121     Require all granted

122 </Directory>

167 <IfModule dir_module>

168     DirectoryIndex webtest index.html#預設發布檔案，先讀前者，前者不可用再讀後者#

169 </IfModule>

firewall-cmd --add-port=8080/tcp

systemctl restart httpd

mkdir /www/html/webtest

selinux標籤與預設發布目錄一致

ls -Z /var/www/

semanage fcontext -a -t httpd_sys_content_t “/www(/.*)?”

restorecon -vvFR /www

二、 虛擬機器主機

一台主機為多個網站提供服務

vim /etc/httpd/conf.d/default.conf

<Virtualhost _default_:80>

        Documentroot /www/html

        Customlog "logs/default.log" combined#指定日誌

</Virtualhost>

vim /etc/httpd/conf.d/news.conf

<Virtualhost *:80>

        Servername news.laosiji.com

        Serveralias news#設定別稱

        Documentroot /www/laosiji.com/news

        Customlog "logs/news.log" combined

</Virtualhost>

<Directory "/www/laosiji.com/news">

        Require all granted

</Directory>

vim /etc/httpd/conf.d/xxx.conf

mkdir -p /www/laosiji.com/news

vim /www/laosiji.com/news/webtest#與前面設定的檔案名稱一致

三、 授權指定使用者訪問

首先建立一個發布目錄作為測試目錄

mkdir -p /www/laosiji.com/admin/webtest

htpasswd -cm /etc/httpd/htpasswd admin    #再次添加使用者時注意，選項為-m，否則之前的資訊會被覆蓋

New password:

Re-type new password:

會產生加密密碼檔案/etc/httpd/htpasswd

<Directory "/www/laosiji.com/film/admin">

        Authuserfile "/etc/httpd/htpasswd"

        Authtype basic

        Authname "Please input username and password"

        Require user admin#或者設定為valid-user所有授權使用者可登陸

</Directory>

四、 自訂自我簽署憑證

yum install crypto-utils mod_ssl

genkey laosiji.com #主機名稱，產生認證

650) this.width=650;" src="http://s2.51cto.com/wyfs02/M02/86/7C/wKioL1fAWHaRPuz7AAD_Ja-i5D4721.png-wh_500x0-wm_3-wmp_4-s_575619680.png" title="Screenshot from 2016-08-24 14_25_39.png" alt="wKioL1fAWHaRPuz7AAD_Ja-i5D4721.png-wh_50" />

選擇next

650) this.width=650;" src="http://s4.51cto.com/wyfs02/M01/86/7D/wKiom1fAWHizgyxJAAEgcliR_5c624.png-wh_500x0-wm_3-wmp_4-s_3529785051.png" title="Screenshot from 2016-08-24 14_26_27.png" alt="wKiom1fAWHizgyxJAAEgcliR_5c624.png-wh_50" />

有幾種密鑰規格供選擇

650) this.width=650;" src="http://s2.51cto.com/wyfs02/M00/86/7C/wKioL1fAWHmgQkpnAACbz3eRUaw103.png-wh_500x0-wm_3-wmp_4-s_630460244.png" title="Screenshot from 2016-08-24 14_29_02.png" alt="wKioL1fAWHmgQkpnAACbz3eRUaw103.png-wh_50" />

產生密鑰中    #產生緩慢時可以敲擊鍵盤或移動滑鼠

650) this.width=650;" src="http://s2.51cto.com/wyfs02/M02/86/7D/wKiom1fAWHryMGCgAABGn6kS0EI317.png-wh_500x0-wm_3-wmp_4-s_1178237941.png" title="Screenshot from 2016-08-24 14_30_25.png" alt="wKiom1fAWHryMGCgAABGn6kS0EI317.png-wh_50" />

選擇no不向CA發送驗證請求

650) this.width=650;" src="http://s4.51cto.com/wyfs02/M01/86/7C/wKioL1fAWHyzy_u5AAEB5zwxHug843.png-wh_500x0-wm_3-wmp_4-s_3057278482.png" title="Screenshot from 2016-08-24 14_30_44.png" alt="wKioL1fAWHyzy_u5AAEB5zwxHug843.png-wh_50" />

選擇next

650) this.width=650;" src="http://s4.51cto.com/wyfs02/M00/86/7C/wKioL1fAWH_R6wVyAAEOvI1VISQ743.png-wh_500x0-wm_3-wmp_4-s_39752700.png" title="Screenshot from 2016-08-24 14_31_30.png" alt="wKioL1fAWH_R6wVyAAEOvI1VISQ743.png-wh_50" />

填寫一些資訊（注意主機名稱不要寫錯）

vim /etc/httpd/conf.d/login.conf#建立login用於測試

mkdir /www/laosiji.com/login

<Virtualhost *:443>

        Servername login.laosiji.com

        Serveralias login

        Documentroot /www/laosiji.com/login

        Customlog "logs/login.log" combined

        SSLEngine on

        SSLCertificateFile /etc/pki/tls/certs/laosiji.com.crt

        SSLCertificateKeyFile /etc/pki/tls/private/laosiji.com.key

</Virtualhost>

<Directory "/www/laosiji.com/login">

        Require all granted

</Directory>

<VirtualHost *:80>#網頁重新導向

servername login.laosiji.com

rewriteengine on

rewriterule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=301]

</VirtualHost>

systemctl restart httpd

vim /www/laosiji.com/login/webtest#寫一份測試文本

Welcome log in

開啟瀏覽器寫入login.laosiji.com

650) this.width=650;" src="http://s3.51cto.com/wyfs02/M00/86/7D/wKiom1fAWf2TxpaLAADBQLxx7-o882.png-wh_500x0-wm_3-wmp_4-s_12222181.png" title="Screenshot from 2016-08-24 14_34_00.png" alt="wKiom1fAWf2TxpaLAADBQLxx7-o882.png-wh_50" />

650) this.width=650;" src="http://s1.51cto.com/wyfs02/M01/86/7D/wKiom1fAWiWwQvXuAABJufXugRc662.png-wh_500x0-wm_3-wmp_4-s_584773479.png" title="Screenshot from 2016-08-24 14_34_22.png" alt="wKiom1fAWiWwQvXuAABJufXugRc662.png-wh_50" />

選擇Add Excetion

650) this.width=650;" src="http://s5.51cto.com/wyfs02/M02/86/7C/wKioL1fAWd3Brj1zAACSeljb2_M959.png-wh_500x0-wm_3-wmp_4-s_1293023035.png" title="Screenshot from 2016-08-24 14_34_34.png" alt="wKioL1fAWd3Brj1zAACSeljb2_M959.png-wh_50" />

選擇Confirm Security Exception

得到認證網頁即可正常顯示

本文出自 “饕餮魚不要吃bug” 部落格，轉載請與作者聯絡！

營運學習筆記Apache服務