Apache

1.环境配置

[root@localhost Desktop]# yum search httpd

httpd.x86_64 : Apache HTTP Server

[root@localhost Desktop]# yum install httpd.x86_64 -y [root@localhost Desktop]# systemctl start httpd [root@localhost Desktop]# cd /var/www/html/ [root@localhost html]# ls [root@localhost html]# vim index.html [root@localhost html]# cat index.html

Ni hao today!

*此时访问不到

*解决方法 [root@localhost html]# firewall-cmd –list-all

public (default, active) interfaces: eth0 sources: services: dhcpv6-client ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules:

[root@localhost html]# firewall-cmd –permanent –add-service=httpd Error: INVALID_SERVICE: httpd

[root@localhost html]# firewall-cmd –permanent –add-service=http

success

[root@localhost html]# firewall-cmd –reload success [root@localhost html]# firewall-cmd –list-all

public (default, active) interfaces: eth0 sources: services: dhcpv6-client http ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules:

[root@localhost html]#

2.http 配置文件

[root@localhost Desktop]# cd /etc/httpd/ [root@localhost httpd]# ls

conf conf.d conf.modules.d logs modules run

conf 主配置文件 …….. Listen 80 #访问端口 …… DocumentRoot “/var/www/html” #默认访问文件目录 （授权） DirectoryIndex index.html #默认访问文件名

#授权格式

#默认访问文件

[root@localhost httpd]# ls conf httpd.conf magic [root@localhost httpd]# ls conf.d autoindex.conf README userdir.conf welcome.conf [root@localhost httpd]#

3.虚拟主机

一台主机的IP可以通过多个域名访问

1)创建域名访问目录 2)编写域名访问文件 3)查看安全上下文 4)虚拟主机的子配置文件

[root@localhost www]# mkdir news #建立虚拟用户访问的目录 [root@localhost www]# echo The weather is so good today > news/linux [root@localhost www]# cat news/linux

The weather is so good today

[root@localhost conf.d]# ls autoindex.conf README userdir.conf welcome.conf

虚拟主机配置文件编写

[root@localhost conf.d]# vim news.conf

Servername news.westos.com #访问的域名 Documentroot /var/www/news #域名对应的家目录 customlog “logs/news.log” combined #日志存放位置 …… require all granted #授予权限

查看安全上下文

[root@localhost conf.d]# ls -Z /var/www/html/index.html -rw-r–r–. root root unconfined_u:object_r:httpd_sys_content_t:s0 /var/www/html/index.html [root@localhost conf.d]# ls -Z /var/www/news/linux -rw-r–r–. root root unconfined_u:object_r:httpd_sys_content_t:s0 /var/www/news/linux

#若安全上下文格式不一致,则需要修改

[root@apache html]# semanage fcontext -a -t httpd_sys_content_t ‘/www(/.*)?’

#或者setenforce 0 #关闭selinux

测试: root@foundation66 ~]# vim /etc/hosts [root@foundation66 ~]# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

#172.25.254.250 content.example.com

172.25.254.100 www.westos.com news.westos.com

4.用户访问加密

[root@localhost Desktop]# cd /etc/httpd/conf/ [root@localhost conf]# ls

httpd.conf magic [root@localhost conf]# htpasswd -cm apachuser dch

#创建用户(第一个用户需要加上c)

New password: Re-type new password: Adding password for user dch

[root@localhost conf]# ls

apachuser httpd.conf magic [root@localhost conf]# cat apachuser dch: apr1 hLElLGdk$JEaxT8Ibv8CdY7yOT5S5l0

[root@localhost conf]# htpasswd -m apachuser lee New password: Re-type new password: Adding password for user lee [root@localhost conf]# ls apachuser httpd.conf magic [root@localhost conf]# cat apachuser

dch: apr1 hLElLGdk$JEaxT8Ibv8CdY7yOT5S5l0

lee: apr1 OEYnk7Ul$mrLiSjuwEHx3whSJMXxiS1

编写登陆加密所需的配置文件

[root@localhost conf]# vim /etc/httpd/conf.d/news.conf

Authuserfile /etc/httpd/conf/apachuser #用户和密码文件存放位置 Authname “Please enter the passwd” Authtype basic #文件类型 Require user dch #用户白名单 Require valid-user #允许所有用户

[root@localhost conf]# mkdir /var/www/news/dch [root@localhost conf]# touch /var/www/news/dch/file1 [root@localhost conf]# cat /var/www/news/dch/file1 Ni hao HAH

测试:

5.添加IP访问权限

[root@localhost conf]# vim /etc/httpd/conf.d/news.conf

Order allow,deny #顺序(允许和否定)

#eg:deny,allow 先执行deny的,再执行allow的

allow from 172.25.254.200 deny from all

6.自定义自签名证书

1.确保已安装crypto-utils软件包

[root@localhost Desktop]# yum install crypto-utils.x86_64 mod_ssl.x86_64 -y

2.调用genkey,同时为生成文件指定唯一生成名称 –days可以指定证书有效期

[root@localhost Desktop]# genkey apache-sever.crt

random seed from /etc/pki/tls/.rand.5424 output will be written to /etc/pki/tls/certs/apache-sever.crt.crt output key written to /etc/pki/tls/private/apache-sever.crt.key

7.安装证书及其私钥

确定已安装mod_ssl软件包

[root@localhost Desktop]# yum search mod_ssl

Loaded plugins: langpacks ====================== N/S matched: mod_ssl ======================= mod_ssl.x86_64 : SSL/TLS module for the Apache HTTP Server Name and summary matches only, use “search all” for everything. [root@localhost Desktop]# vim /etc/httpd/conf.d/news.conf [root@localhost Desktop]# systemctl restart httpd.service