httpd

AppSrv

 安装web服务

yum install httpd -y

服务以用户webuser系统用户运行

useradd -r webuser       USERADD命令详解_useradd -r_haibintalk的博客-CSDN博客

vim /etc/httpd/conf/httpd.conf

 systemctl enable httpd  开机自启动

 vim /etc/systemd/system/multi-user.target.wants/httpd.service

 systemctl daemon-reload

用来重新加载系统d传（daemon）控制器,即systemd中 service文件会改变 重新加载该服务使其生效

systemctl restart httpd

Server01

vim /etc/pki/tls/openssl.cnf    https://www.cnblogs.com/along21/p/7595912.html

 这两个博客讲了主配置文件

(3条消息) OpenSSL生成根证书CA及签发证书_skytering的博客-CSDN博客https://blog.csdn.net/skytering/article/details/103247128

(3条消息) OpenSSL之七：openssl.cnf_二流人物的博客-CSDN博客https://blog.csdn.net/wzfgd/article/details/109805158AppSrv

创建根证书

mkdir /csk-rootca

cp -rf /etc/pki/tls/* /csk-rootca

cd /csk-rootca

touch index.txt

echo 01 >serial

openssl genrsa -out private/cakey.pem 2048

 

openssl req -x509 -new -key ./private/cakey.pem -out csk-ca.pem

 申请网站证书密钥和请求证书

openssl genrsa -out httpd.key 2048

 openssl req  -new -key  httpd.key -out httpd.csr

给证书签名

openssl x509 -req -in httpd.csr -CA /csk-rootca/csk-ca.pem -CAkey /csk-rootca/private/cakey.pem -CAcreateserial -out httpd.crt

 

还有跟多不会等我搞清楚了 再重新编辑一下呐！

谢谢