web服务

01_web服务
作业：请给openlab搭建web网站
网站需求：
1.基于域名 www.openlab.com 可以访问网站内容为 welcome to openlab!!!

vi /etc/hosts
192.168.38.128 www.openlab.com

vi /etc/httpd/conf.d/open.conf
listen 80
<directory /www>
allowoverride none
require all granted
</directory>

<virtualhost 192.168.38.128:80>
DocumentRoot /www/open.com
ServerName www.openlab.com
</virtualhost>

#2.写网页
mkdir /www/open.com
echo welcome to openlab! > /www/open.com/index.html
#3测试
关闭服务，重启
systemctl restart httpd
setenforce 0
systemctl stop firewalld
curl www.openlab.com

2.给该公司创建三个子界面分别显示学生信息，教学资料和缴费网站，
1、基于 www.openlab.com/student 网站访问学生信息，

#3.student页面
vi /etc/httpd/conf.d/open.conf
<VirtualHost *:80>
        DocumentRoot  /www/openlab
        Alias  /student    /www/openlab/student
        ServerName  www.openlab.com
</VirtualHost>
<Directory /www/openlab/student>
        AuthType Basic
        AuthName "Please login:..."
        AuthuserFile /etc/httpd/usrfile
        Require user  song tian
</Directory>


htpasswd -c /etc/httpd/userfile song //1234
htpasswd /etc/httpd/userfile tian  //1234
mkdir /www/openlab/student
systemctl restart httpd
www.openlab.com/student  //浏览器访问

2、基于 www.openlab.com/data 网站访问教学资料

#2.data子页面
vi /etc/httpd/conf.d/open.conf
<virtualhost 192.168.38.128:80>
DocumentRoot /www/open.com
Alias  /data    /www/openlab/data
ServerName www.openlab.com
</virtualhost>

mkdir /www/openlab/data
echo 'this is openlab data' > /www/openlab/data/index.html
systemctl restart httpd
curl www.openlab.com/data/

3、基于 www.openlab.com/money 网站访问缴费网站。

#3.访问缴费子页面money
#基于https加密
1.安装mod_ssl
 yum install mod_ssl -y
2.制作密钥和证书
openssl req -newkey rsa:4096 -nodes -sha256 -keyout /etc/pki/tls/private/openlab.key -x509 -days 365 -out /etc/pki/tls/certs/openlab.crt
Generating a RSA private key
3.修改配置文件
vi /etc/httpd/conf.d/open.conf
 <VirtualHost *:443>
        DocumentRoot  /www/openlab
        Alias  /money    /www/openlab/money
        ServerName  www.openlab.com
        SSLEngine on
        SSLCertificateFile /etc/pki/tls/certs/openlab.crt
        SSLCertificateKeyFile /etc/pki/tls/private/openlab.key
</VirtualHost>
#创建网页目录及访问内容
mkdir /www/openlab/money
echo 'openlab money' > /www/openlab/money/index.html
systemctl  restart httpd
5.测试
curl https://www.openlab.com/money/ -k

3.要求
（1）学生信息网站只有 song 和 tian 两个用户可以访问，其他用户不能访问。
（2）访问缴费网站实现数据加密基于 https 访问。