ev multi domain ssl

Tag: Address Web server port Create DDE Environment Multi-site pre profilepache是一款Web服务器软件，有多种产品，可以支持SSL技术，支持多个虚拟主机。它快速、可靠并且可通过简单的API扩充，将Perl／Python等解释器编译到服务器中。实验环境一台linux6.5，ip为192.168.10.20.，DNS服务器ip地址为192.168.10.20；一、创建虚拟目录配置1、进入主配置文件设置2、写入网页内容3、去访问网页4、创建虚拟目录5、使用http://192.168.10.20/test/进行访问二、搭建虚拟主机同端口同Ip不同域名1、创建文件写入内容2、创建网站目录写入内容3、安装DNS并设置主配置文件4、区域数据文件设置5、进入区域数据配置相关目录6、重启服务7、指出DNS服务器地址8、登陆网页进行验证三、搭建同ip

#server sshd192.168.1.104: ACheck Port AInter theFall5frontend www.app01.com mode http bind0.0.0.0:443SSL Crt/etc/ssl/keys/www.app01.com.pem crt/etc/ssl/keys/Www.app02.com.pem use_backend www_app01_comif{Ssl_fc_sni www.app01.com} use_backend www_app02_comif{ssl_fc_sni www.app02.com}backend www_app01_com mode http Server app01192.168.1.108:8010Backend www_app02_com mode HTTP server app02192.168.1.109:8020Ha

; #log_format main ' $remote _addr-$remote _user [$time _local] "$request" '# ' $status $body _bytes_sent ' $http _referer '# ' "$http _user_agent" "$http _x_forwarded_for" ';#access_log Logs/access.log main; Sendfileon ; #tcp_nopush on;#keepalive_timeout 0; Keepalive_timeout; gzipon ; include.. /vhost/*.conf; # Another virtual host using mix of ip-, name-, and port-based configuration ##server {# Listen 8000;# listen somename:8080;# server_name Somename alias Another.ali

not modify the configuration file.2.2 Copy openssl.cnf to current directoryCp/etc/ssl/openssl.cnf./2.3 Modify the copied configuration file as follows:1> Uncomment line under [req] Block req_extensions = V3_req2> Make sure there are no 0.xxx tags under [req_distinguished_name], and some say 0.xxx of 0. Remove3> add a line under [v3_req] block subjectaltname = @alt_names4> Add the following information at the end of the file:[Alt_names]Dns.1 = www.liq

-signkeypassport.abc.com.key-outpassport.abc.com.crt[[email protected]keys]#catpassport.abc.com.crtpassport.abc.com.key|tee Passport.abc.com.pemAccording to the above method to generate www.test.com admin.abc.com certificate file, each site will eventually have a PEM file generationConfigure the configuration file for Haproxy:frontendhttp_serverbind:80 bind:443sslcrt/etc/haproxy/keys/www.test.com.pemcrt /etc/haproxy/keys/admin.test.com.pemcrt/etc/haproxy/keys/passport.abc.com.pem #按照如上规则如果多个站点就

Apache listening on127.0.0.1:80 the#106#location ~ \.php$ {107# Proxy_pass http://127.0.0.1;108#}109 the# Pass the PHP scripts to FastCGI server listening on127.0.0.1:9000111# the#location ~ \.php$ {113# root HTML; the# Fastcgi_pass 127.0.0.1:9000; the# Fastcgi_index index.php; the# Fastcgi_param Script_filename/scripts$fastcgi_script_name;117# include Fastcgi_params;118#}119 -# Deny access to. htaccessFiles,ifApache ' s document Root121#concurs with Nginx ' s one122#123#location ~/\.HT {124#