RHCE-配置一个安全的WEB服务

从http://classroom.example.com/pub/tls/certs/server0.crt获取证书的秘钥；

从http://classroom.example.com/pub/tls/private/server0.key获取证书签名授权信息；

从http://classroom.example.com/pub/example-ca.crt获取证书

[root@server0 ~]# yum install mod_ssl –y              安装mod_ssl文件

[root@server0 ~]# cd /etc/httpd/conf                  进入目录/etc/httpd/conf

[root@server0 conf]# wget http://classroom.example.com/pub/tls/certs/server0.crt        下载证书秘钥

[root@server0 conf]# wget http://classroom.example.com/pub/tls/private/server0.key       下载证书签名信息

[root@server0 conf]# wget http://classroom.example.com/pub/example-ca.crt              下载证书

[root@server0 ~]# vim /etc/httpd/conf.d/ssl.conf               配置证书秘钥、签名等信息，分别在100、107、122行

100 SSLCertificateFile /etc/httpd/conf/server0.crt               证书秘钥调用路径

107 SSLCertificateKeyFile /etc/httpd/conf/server0.key              证书签名信息调用路径

122 SSLCACertificateFile /etc/httpd/conf/example-ca.crt             证书调用路径

[root@server0 ~]# systemctl restart httpd.service                 重启httpd服务

测试通过浏览器打开https://server0.example.com（开始会提示错误，添加证书后能正常打开）