Apache服務器搭建

[Apache]
#yum install -y httpd
#mkdir -p /data/www/html
#vim /data/www/html/test.html
hello world
#vim /etc/httpd/conf/httpd.conf
DocumentRoot "/data/www/html"

<Directory "/data/www/html">
    Require all granted
</Directory>

<IfModule dir_module>
    DirectoryIndex index.html  test.html
</IfModule>
#semanage  fcontext  -a -t httpd_sys_content_t '/data(/.*)?' //更改安全上下文
#restorecon  -FvvR /westos/
#systemctl restart httpd.service
#curl  -I localhost
HTTP/1.1 200 OK
Date: Sun, 15 Mar 2015 06:58:08 GMT
Server: Apache/2.4.6 (Red Hat)
Last-Modified: Sun, 15 Mar 2015 06:23:52 GMT
ETag: "28-5114dc6fc9141"
Accept-Ranges: bytes
Content-Length: 40
Content-Type: text/html; charset=UTF-8
[配置虛擬主機]
#vim /etc/httpd/conf.d/virtual.conf

<VirtualHost *:80>
    ServerName www.sina.com
    ServerAlias  sina.com
    DocumentRoot /virtual/www.sina.com/html
</VirtualHost>
<Directory "/virtual/www.sina.com/html">
    Require all granted
</Directory>

<VirtualHost *:80>
    ServerName www.alibaba.com
    ServerAlias  alibaba.com
    DocumentRoot /virtual/www.alibaba.com/html
</VirtualHost>
<Directory "/virtual/www.alibaba.com/html">
    Require all granted
</Directory>

#vim /etc/httpd/conf.d/defualt.conf
<VirtualHost _default_:80>
    DocumentRoot /data/www/html
    ErrorLog logs/www.html.com.log  //在/etc/httpd/logs/www.html.com.log

</VirtualHost>
<Directory "/data/www/html">
    Require all granted
</Directory>
配置基於用戶的身份驗證
用兩個帳戶建立Apache密碼文件:
#useradd damin
#htpasswd  -cm   /etc/httpd/.htpasswd   admin //首次加-c建立密碼文件下來就不須要了。
#htpasswd  -m    /etc/httpd/.htpasswd   test
#vim /etc/httpd/conf.d/virtual.conf
<Directory /virtual/www.sina.com/html>
AuthName 「Please input your name and password !」
AuthType basic
AuthUserFile /etc/httpd/.htpasswd
Require valid-user
</Directory>
#systemctl restart httpd

[配置HTTPS]
#使用genkey實用程序(經過crypto-utils軟件包分發),生成自簽名證書及其關聯的
私鑰。爲了簡化起見,genkey將在「正確」的位置(/etc/pki/tls目錄)建立證書及其
關聯的密鑰。相應地,必須以受權用戶(root)身份運行該實用程序。
#yum install -y crypto-utils  mod_ssl
#genkey   www.alibaba.com
#ls -l /etc/pki/tls/private/www.alibaba.com.key
#ls -l /etc/pki/tls/certs/www.alibaba.com.crt
確保這兩個文件只有root可讀
#vim /etc/httpd/conf.d/virtual.conf
把全部80端口的請求所有重定向由https來處理
<Virtualhost *:80>
ServerName www.alibaba.com
RewriteEngine on
RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=301]
</Virtualhost>
加密端口爲443
VirtualHost *:443>
servername www.alibaba.com
documentroot /virtual/www/html
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/www.alibaba.com.crt
SSLCertificateKeyFile /etc/pki/tls/private/www.alibaba.com.key
<Directory "/virtual/www.alibaba.com/html">
require all granted
</Directory>
</VirtualHost>
<VirtualHost *:80>
servername www.alibaba.com
rewriteengine on
rewriterule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=301]
</VirtualHost>
#systemctl restart httpd