RHCE7参考答案（13）配置安全Web服务

最新推荐文章于 2021-08-17 16:44:39 发布

wanboo0205

最新推荐文章于 2021-08-17 16:44:39 发布

阅读量200

点赞数

分类专栏： Linux运维 RHCE 文章标签： RHCE 红帽考试 Linux 服务器

本文链接：https://blog.csdn.net/weixin_41176080/article/details/106787068

版权

Linux运维同时被 2 个专栏收录

179 篇文章 5 订阅

订阅专栏

RHCE

4 篇文章 0 订阅

订阅专栏

13.配置安全Web服务

为站点http://server0.example.com配置TLS加密：

一个已签名证书从http://classroom.example.com/pub/tls/certs/server0.crt获取
此证书的密钥从http://classroom.example.com/pub/tls/private/server0.key获取
此证书的签名授权信息从http://classroom.example.com/pub/example-ca.crt获取

[root@server0 ~]# yum -y install mod_ssl
[root@server0 ~]# cd /etc/pki/tls/certs
[root@server0 certs~]#wget http://classroom.example.com/pub/tls/certs/server0.crt
[root@server0 certs~]#wget http://classroom.example.com/pub/example-ca.crt
[root@server0 certs~]# cd ..
[root@server0 tls~]# cd private
[root@server0 private~]# wget
http://classroom.example.com/pub/tls/private/server0.key
[root@server0 private~]# vim /etc/httpd/conf.d/ssl.conf
<VirtualHost _default_:443>
DocumentRoot “/var/www/html”
ServerName server0.example.com:443
… … #修改第 100、107、122 行，如下所示
SSLCertificateFile /etc/pki/tls/certs/server0.crt
SSLCertificateKeyFile /etc/pki/tls/private/server0.key
SSLCACertificateFile /etc/pki/tls/certs/example-ca.crt
</VirtualHost>
[root@server0 private~]# systemctl restart httpd
[root@server0 private~]# systemctl enable httpd