配置安全web服務

爲站點 http://system1.group8.example.com 配置TLS加密：

一、一個已簽名證書從 http://server.group8.example.com/pub/tls/certs/system1.crt 獲取

二、此證書的密鑰從 http://server.group8.example.com/pub/tls/private/system1.key 獲取

三、此證書的簽名受權信息從 http://server.group8.example.com/pub/tls/certs/ssl-ca.crt 獲取

答：

再system1上執行：

一、安裝 ssl 模塊

yum install mod_ssl -y

二、修改配置文件

vim /etc/httpd/conf.d/httd-vhosts.conf

<VirtualHost *:80>
    DocumentRoot "/var/www/html"
    ServerName system1.group8.example.com
    
    <Directory "/var/www/html">
        <RequireAll>
            Require all granted
            Require not host .my133t.org
        </RequireAll>
    </Directory>

    SSLEngine on
    SSLProtocol all -SSLv2 -SSLv3
    SSLCertificateKeyFile /etc/pki/tls/certs/system1.crt
    SSLCertificateKeyFile /etc/pki/tls/private/system1.key
    SSLCACertificateFile /etc/pki/tls/certs/ssl-ca.crt

</VirtualHost>

三、下載證書

# 下載證書到指定目錄內
wget -O /etc/pki/tls/certs/system1.crt http://server.group8.example.com/pub/tls/certs/system1.crt
wget -O /etc/pki/tls/private/system1.key http://server.group8.example.com/pub/tls/private/system1.key
wget -O /etc/pki/tls/certs/ssl-ca.crt http://server.group8.example.com/pub/tls/certs/ssl-ca.crt

四、添加防火牆

firewall-cmd --permanent  --add-service=https
firewall-cmd --reload

五、重啓web服務

systemctl restart httpd

驗證：再system2上驗證

curl -k https://system1.group8.example.com

 

---

更多詳情：https://www.cnblogs.com/xiangsikai/p/9810290.html