位置: 编程技术 - 正文
推荐整理分享Centos6.3下Apache配置基于加密的认证https加密证书访问 (centos8 apache),希望有所帮助,仅作参考,欢迎阅读内容。
文章相关热门搜索词:centos7安装配置apache,centos配置apache web服务器,centos apache 配置,如何配置centos7下的apache服务,centos apache 配置,centos apache2,centos apache2,如何配置centos7下的apache服务,内容如对您有帮助,希望把文章链接给更多的朋友!
这里简单演示一下Apache下基于加密的认证访问----https加密方式访问。
1.DNS解析解析情况:
[root@localhost html]# nslookup www.downcc.com
Server: ..2.
Address: ..2.#
Name: www.downcc.com
Address: ..2.
2.安装Apache SSL支持模块:# yum install -y mod_ssl (默认yum安装httpd是没有安装该模块的,安装后自动生产/etc/httpd/conf.d/ssl.conf文件)并生成证书。
[root@localhost certs]# pwd
/etc/pki/tls/certs
[root@localhost certs]# ls
ca-bundle.crt index.html localhost.crt Makefile
ca-bundle.trust.crt localhost1.crt make-dummy-cert
[root@localhost certs]# openssl req -utf8 -new -key ../private/localhost.key -x -days -out abc_com.crt
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:
Locality Name (eg, city) [Default City]:GZ
Organization Name (eg, company) [Default Company Ltd]:ABC.COM
Organizational Unit Name (eg, section) []:Mr.Zhang
Common Name (eg, your name or your server's hostname) []:www.downcc.com
Email Address []:root@abc.com
[root@localhost certs]#
3.配置Apache,基本配置这里不多说了,下面是配置www.downcc.com站点http访问的情况。
[root@localhost html]# tail -n 8 /etc/httpd/conf/httpd.conf
NameVirtualhost ..2.:
<VirtualHost www.downcc.com:>
ServerAdmin webmaster@dummy-host.example.com
DocumentRoot /var/www/html
ServerName www.downcc.com
ErrorLog logs/dummy-host.example.com-error_log
CustomLog logs/dummy-host.example.com-access_log common
</VirtualHost>
[root@localhost html]# tail /var/www/html/index.html
www.downcc.com
[root@localhost html]#
4.配置Apache支持https访问www.downcc.com站点,编辑 vim /etc/httpd/conf.d/ssl.conf 文件,制定www.downcc.com站点https访问时的相关信息。添加下面配置。
<VirtualHost www.downcc.com:>
DocumentRoot "/var/www/html/www.kuteatest.net" #//为了显示效果,这里的站点目录不一样,一般情况一个域名应该指向同一目录的。
ServerName www.downcc.com:
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/pki/tls/certs/abc_com.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
<Files ~ ".(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*"
nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
</VirtualHost>
5.重启Apache服务,测试访问。
测试http访问的结果
测试https访问的结果
查看证书信息和自建crt信息一致
https访问的最终结果
CentOS中使用top命令查看CPU详细图解 CentOS是RHEL(RedHatEnterpriseLinux)源代码再编译的产物,而且在RHEL的基础上修正了不少已知的Bug,相对于其他Linux发行版,其稳定性值得信赖。在系统维护的
CentOS 6.4中出现Vsftpd中文乱码解决过程 Windows客户端访问FTP应用服务器出现乱码。这是由于UTF-8与GBK不兼容而头疼的引起的,采用源码方式编译安装就可将此问题解决。乱码解决过程:1、首先
CentOS通过VNC远程桌面管理配置教程分享 一、查看是否安装VNC1、安装桌面yumgroupinstallChineseSupport2、安装中文支持yumgroupinstallDesktop打开配置文件的目录:1)cd/etc/sysconfig2)编辑配置文件:viin3)用
标签: centos8 apache
本文链接地址:https://www.jiuchutong.com/biancheng/357316.html 转载请保留说明!上一篇:CentOS简介与RedHat Linux的区别介绍(centos和rhel)
友情链接: 武汉网站建设