网站需求:
1.基于域名www.openlab.com可以访问网站内容为 welcome to openlab!!!
2.给该公司创建三个子界面分别显示学生信息,教学资料和缴费网站,基于www.openlab.com/student 网站访问学生信息,www.openlab.com/data网站访问教学资料
www.openlab.com/money网站访问缴费网站。
3.要求(1)学生信息网站只有song和tian两人可以访问,其他用户不能访问。
(2)访问缴费网站实现数据加密基于https访问。
(1)挂载
[root@localhost ~]# mount /dev/sr0 /mnt
(2)安装
[root@localhost ~]# yum install httpd -y
(3)关闭防火墙
[root@localhost ~]# systemctl stop firewalld
(4)关闭selinux
[root@localhost ~]# setenforce 0
(5)重启服务
[root@localhost ~]# systemctl start httpd
(6)修改hosts配置
[root@localhost ~]# vim /etc/hosts
192.168.198.129 www.openlab.com
(7)修改vhosts配置文件
[root@localhost ~]# vim /etc/httpd/conf.d/vhosts.conf
<VirtualHost 192.168.198.129:80>
DocumentRoot /www/openlab
ServerName www.openlab.com
alias /student /www/student
alias /data /www/data
</VirtualHost>
<Directory /www/student>
AuthType Basic
AuthName "请输入用户名密码认证"
AuthUserfile /etc/httpd/users
Require user song tian
</Directory>
<Directory /www>
AllowOverride none
Require all granted
</Directory>
<VirtualHost 192.168.198.129:443>
alias /money /www/jiami/money
SSLENGINE on
SSLCertificateFile /etc/pki/tls/certs/openlab.crt
SSLCertificateKeyFile /etc/pki/tls/certs/openlab.key
DocumentRoot /www/jiami/money
ServerName 192.168.198.129
</VirtualHost>
<Directory /www/jiami/money>
AllowOverride none
Require all granted
</Directory>
(8)安装ssl证书
yum install mod_ssl -y
(9)创建证书
[root@localhost certs]# openssl req -newkey rsa:4096 -nodes -sha256 -keyout /etc/pki/tls/certs/openlab.key-x509 -days 365 -out /etc/pki/tls/certs/openlab.crt
(10)创建配置文件中的目录
[root@localhost ~]#mkdir /www/{openlab,student,data}
[root@localhost ~]#mkdir /www/jiami/money
(11)创建文件
[root@localhost ~]# echo Welcome to openlab > /www/openlab/index.html
[root@localhost ~]# echo This is student system > /www/student/index.html
[root@localhost ~]# echo This is data system > /www/data/index.html
[root@localhost ~]# echo This is money system > /www/jiami/money/index.html
(12)创建用户
[root@localhost ~]# htpasswd -c /etc/httpd/users song
[root@localhost ~]# htpasswd /etc/httpd/users tian
(13)重启服务测试
[root@localhost certs]# systemctl restart httpd