RHCE作业---搭建网站（基于https）

搭建一个基于https://www.zuoye.com:22222访问的web网站，网站首页在/www/https/，内容为zuoye，可以根据https://www.zuoye.com:22222/mimi访问到的信息为mimi，该网站的实际内容在/usr/local/secret，该网站的内容只有用户xiaoming能够查看。
准备条件：
1.搭建之前确保光盘已挂载，并且yum源已写好
2.安装httpd 、mod_ssl包

[root@localhost ~]# yum httpd -y
[root@localhost ~]# yum install mod_ssl -y

步骤
1.切换到/etc/httpd/conf.d目录下

[root@localhost certs]# cd /etc/httpd/conf.d

2.安装mod_ssl 包，安装lrzsz包

[root@localhost conf.d]# yum install mod_ssl -y

[root@localhost certs]# yum install lrzsz -y

3.新建IP 192.168.168.13 并激活
选择桥接或者NAT模式。
[root@localhost conf.d]# nmcli connection modify ens160 +ipv4.addresses 192.168.168.13/24
[root@localhost conf.d]# nmcli connection up ens160
4.创建并编辑 vhost-https.conf 文件

[root@localhost conf.d]# vim vhost-https.conf

listen 22222
<virtualhost 192.168.111.130:22222>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/https.crt
SSLCertificateKeyFile /etc/pki/tls/certs/https.key

5.创建证书文件
先切换到 /etc/pki/tls/certs/ 目录

[root@localhost ~]# cd /etc/pki/tls/certs/

创建一个私钥文件 https.key
[root@localhost certs]# openssl genrsa -aes128 2048 > http.key
[root@localhost certs]# openssl genrsa -aes128 2048 > https.key
[root@localhost certs]# openssl genrsa -aes128 2048 > https.crt
再创建一个于私钥匹配的公钥文件，制作成证书
[root@localhost certs]# openssl req -utf8 -new -key https.key -x509 -days 365 -out https.crt -set_serial 0
[root@localhost certs]# ll
-rw-r–r--. 1 root root 1766 Jul 30 10:04 http.key
-rw-r–r--. 1 root root 1766 Jul 30 10:05 https.crt
-rw-r–r--. 1 root root 1766 Jul 30 10:05 https.key

6.重新切换到/etc/httpd/conf.d目录下，编辑vhost-https.conf文件

[root@localhost certs]# cd -
/etc/httpd/conf.d
[root@localhost conf.d]# vim vhost-https.conf

listen 22222
<virtualhost 192.168.111.130:22222>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/https.crt
SSLCertificateKeyFile /etc/pki/tls/certs/https.key
servername www.zuoye.com
documentroot /www/https
alias /mimi /usr/local/secret

<directory /www/https>
allowoverride none
require all granted

<directory /usr/local/secret>
authtype basic
authname “login:”
authuserfile /etc/httpd/renzheng
require user xiaoming

创建目录

[root@localhost conf.d]# mkdir /www/https -p（一定要加-p，不然会报错）
[root@localhost conf.d]# mkdir /usr/local/secret
创建认证文件

[root@localhost conf.d]# htpasswd -c /etc/httpd/renzheng xiaoming
New password:
Re-type new password:
Adding password for user xiaoming
[root@localhost conf.d]# cat /etc/httpd/renzheng
7.写index文件

[root@localhost conf.d]# echo zuoye >//www/https/index.html
[root@localhost conf.d]# echo mimi >/usr/local/secret/index.html
注意：检查防火墙是否关闭
systemctl stop firewalld
setenforce 0
systemctl restart httpd
curl -k https:///192.168.111.130:22222/mimi/ -u xiaoming
curl https//192.168.111.130:22222
如果出现这个错误

写这个
export https_proxy=https:192.168.111.129:22222
或者
vim /etc/resolv.conf添加DNS

注意你的虚拟机一定要能上网。