RHCE2------https练习题2

搭建一个基于https://www.zuoye.com:22222访问的web网站，网站首页在/www/https/，内容为zuoye，可以根据https://www.zuoye.com:22222/mimi访问到的信息为mimi，该网站的实际内容在/www/secret，该网站的内容只有用户xiaoming能够查看。
1.安装mod_ssl包，关闭防火墙和selinux
[root@www /]# yum -y install mod_ssl
[root@www /]# systemctl stop firewalld
[root@www /]# setenforce 0
2.创建对应的目录，并添加相应的访问内容
[root@www conf.d]# mkdir -p /www/https
[root@www ~]# mkdir -p /www/srcret
[root@www conf.d]# echo zuoye > /www/https/index.html
[root@www conf.d]# echo mimi > /www/secret/index.html
2.列出示例文件，并进行相应的配置
[root@www /]# cd /etc/httpd/conf.d
[root@www conf.d]# ll
-rw-r–r--. 1 root root 8720 12月 2 2019 ssl.conf
[root@www conf.d]# vim ssl.conf（示例文件）
[root@www conf.d]# vim zuoye.conf 编辑配置文件（sp:sssl.conf）
<virtualhost 192.168.142.12:22222>
sslengine on
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
documentroot /www/https
servername www.zuoye.com
alias /mimi /www/secret

listen 22222

<directory /www/https>
allowoverride none
require all granted

<directory /www/secret>
allowoverride none
require all granted

[root@localhost conf.d]# vim /etc/hosts
192.168.142.12 www.zuoye.com
4.制作8版本的证书
[root@www conf.d]# openssl genrsa -aes128 2048 > https.key（之后输入密码）
[root@www conf.d]# ll
[root@www conf.d]# openssl req -utf8 -new -key https.key -x509 -days 365 -out localhost.crt
Enter pass phrase for https.key:(之后输入信息)
5.虚拟目录用户访问
[root@localhost ~]# htpasswd -c /etc/httpd/conf.d/mima xiaoming
修改信息
<directory /www/secret>
authtype basic
authname “please login www.zuoye.com:”
authuserfile /etc/httpd/conf.d/mima
require user xiaoming

6.重启服务并进行测试
[root@www conf.d]# systemctl restart httpd
[root@localhost conf.d]# curl https://www.zuoye.com:22222 -k
zuoye
[root@localhost conf.d]# curl https://www.zuoye.com:22222/mimi -k -u xiaoming
Mimi