01_web服务
作业:请给openlab搭建web网站
网站需求:
1.基于域名 www.openlab.com 可以访问网站内容为 welcome to openlab!!!
vi /etc/hosts
192.168.38.128 www.openlab.com
vi /etc/httpd/conf.d/open.conf
listen 80
<directory /www>
allowoverride none
require all granted
</directory>
<virtualhost 192.168.38.128:80>
DocumentRoot /www/open.com
ServerName www.openlab.com
</virtualhost>
#2.写网页
mkdir /www/open.com
echo welcome to openlab! > /www/open.com/index.html
#3测试
关闭服务,重启
systemctl restart httpd
setenforce 0
systemctl stop firewalld
curl www.openlab.com
2.给该公司创建三个子界面分别显示学生信息,教学资料和缴费网站,
1、基于 www.openlab.com/student 网站访问学生信息,
#3.student页面
vi /etc/httpd/conf.d/open.conf
<VirtualHost *:80>
DocumentRoot /www/openlab
Alias /student /www/openlab/student
ServerName www.openlab.com
</VirtualHost>
<Directory /www/openlab/student>
AuthType Basic
AuthName "Please login:..."
AuthuserFile /etc/httpd/usrfile
Require user song tian
</Directory>
htpasswd -c /etc/httpd/userfile song //1234
htpasswd /etc/httpd/userfile tian //1234
mkdir /www/openlab/student
systemctl restart httpd
www.openlab.com/student //浏览器访问
2、基于 www.openlab.com/data 网站访问教学资料
#2.data子页面
vi /etc/httpd/conf.d/open.conf
<virtualhost 192.168.38.128:80>
DocumentRoot /www/open.com
Alias /data /www/openlab/data
ServerName www.openlab.com
</virtualhost>
mkdir /www/openlab/data
echo 'this is openlab data' > /www/openlab/data/index.html
systemctl restart httpd
curl www.openlab.com/data/
3、基于 www.openlab.com/money 网站访问缴费网站。
#3.访问缴费子页面money
#基于https加密
1.安装mod_ssl
yum install mod_ssl -y
2.制作密钥和证书
openssl req -newkey rsa:4096 -nodes -sha256 -keyout /etc/pki/tls/private/openlab.key -x509 -days 365 -out /etc/pki/tls/certs/openlab.crt
Generating a RSA private key
3.修改配置文件
vi /etc/httpd/conf.d/open.conf
<VirtualHost *:443>
DocumentRoot /www/openlab
Alias /money /www/openlab/money
ServerName www.openlab.com
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/openlab.crt
SSLCertificateKeyFile /etc/pki/tls/private/openlab.key
</VirtualHost>
#创建网页目录及访问内容
mkdir /www/openlab/money
echo 'openlab money' > /www/openlab/money/index.html
systemctl restart httpd
5.测试
curl https://www.openlab.com/money/ -k
3.要求
(1)学生信息网站只有 song 和 tian 两个用户可以访问,其他用户不能访问。
(2)访问缴费网站实现数据加密基于 https 访问。