<em id="hanht"></em>

    <dd id="hanht"></dd>

    <em id="hanht"><acronym id="hanht"></acronym></em>
    
    <button id="hanht"></button>
    <rp id="hanht"><object id="hanht"><blockquote id="hanht"></blockquote></object></rp><em id="hanht"></em>

    首頁 > 服務器 > Web服務器 > 正文

    Centos 5下配置https服務器的方法

    2019-10-13 18:40:53
    字體:
    來源:轉載
    供稿:網友

    Centos 5下配置https服務器的步驟,需要的朋友可以參考下。

    [root@centos5 ~]# yum -y install mod_ssl 在線安裝mod_ssl
    Loading "fastestmirror" plugin
    Loading mirror speeds from cached hostfile
    * base: centos.candishosting.com.cn
    * updates: mirror.khlug.org
    * addons: centos.candishosting.com.cn
    * extras: centos.candishosting.com.cn
    Setting up Install Process
    Parsing package install arguments
    Resolving Dependencies
    --> Running transaction check
    ---> Package mod_ssl.i386 1:2.2.3-11.el5_2.centos.4 set to be updated
    --> Processing Dependency: libdistcache.so.1 for package: mod_ssl
    --> Processing Dependency: libnal.so.1 for package: mod_ssl
    --> Running transaction check
    ---> Package distcache.i386 0:1.4.5-14.1 set to be updated
    --> Finished Dependency Resolution

    Dependencies Resolved

    =============================================================================
    Package Arch Version Repository Size
    =============================================================================
    Installing:
    mod_ssl i386 1:2.2.3-11.el5_2.centos.4 updates

    85 k
    Installing for dependencies:
    distcache i386 1.4.5-14.1 base 119 k

    Transaction Summary
    =============================================================================
    Install 2 Package(s)
    Update 0 Package(s)
    Remove 0 Package(s)

    Total download size: 204 k
    Downloading Packages:
    (1/2): mod_ssl-2.2.3-11.e 100% |=========================| 85 kB 00:02
    (2/2): distcache-1.4.5-14 100% |=========================| 119 kB 00:03
    Running rpm_check_debug
    Running Transaction Test
    Finished Transaction Test
    Transaction Test Succeeded
    Running Transaction
    Installing: distcache ######################### [1/2]
    Installing: mod_ssl ######################### [2/2]

    Installed: mod_ssl.i386 1:2.2.3-11.el5_2.centos.4
    Dependency Installed: distcache.i386 0:1.4.5-14.1
    Complete!

    [root@centos5 ~]# cd /etc/httpd/conf 進入HTTP服務器配置文件所在目錄
    [root@centos5 conf]# rm -rf ssl.*/server.* 刪除默認或殘留的服務器證書相關文件

    [root@centos5 ~]# rpm -qa |grep openssl
    openssl-0.9.8b-10.el5

    [root@centos5 ~]# openssl genrsa -out www.yang.com.key 1024 建立服務器密鑰
    Generating RSA private key, 1024 bit long modulus
    ...........................................................++++++
    .++++++
    e is 65537 (0x10001)

    [root@centos5 ~]# openssl req -new -key www.yang.com.key -out www.yang.com.csr 建立服務器公鑰

    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [GB]:OM 輸入國名
    State or Province Name (full name) [Berkshire]:fuzhou 輸入省名
    Locality Name (eg, city) [Newbury]:fou 輸入城市名
    Organization Name (eg, company) [My Company Ltd]:yang 輸入組織名(任意)
    Organizational Unit Name (eg, section) []:www 不輸入,直接回車
    Common Name (eg, your name or your server's hostname) []:www.yang.com 輸入通稱(任意)
    Email Address []:admin@yang.com 輸入電子郵箱地址

    Please enter the following 'extra' attributes
    to be sent with your certificate request
    A challenge password []: 不輸入,直接回車
    An optional company name []: 不輸入,直接回車

    [root@centos5 ~]# ls -l
    total 68
    -rw------- 1 root root 986 Jan 31 23:54 anaconda-ks.cfg
    drwxr-xr-x 2 root root 4096 Feb 1 02:17 Desktop
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Finished
    -rw-r--r-- 1 root root 15078 Jan 31 23:54 install.log
    -rw-r--r-- 1 root root 2876 Jan 31 23:53 install.log.syslog
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Package
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Processing
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Running
    -rw-r--r-- 1 root root 684 Feb 1 04:54 www.yang.com.csr
    -rw-r--r-- 1 root root 887 Feb 1 04:52 www.yang.com.key

    [root@centos5 ~]# openssl x509 -req -days 365 -in www.yang.com.csr -signkey www.yang.com.key -out www.yang.com.crt 建立服務器證書

    Signature ok
    subject=/C=OM/ST=fuzhou /L=fou/O=yang/OU=www/CN=www.yang.com/emailAddress=admin@ yang.com
    Getting Private key

    [root@centos5 ~]# ll
    total 72
    -rw------- 1 root root 986 Jan 31 23:54 anaconda-ks.cfg
    drwxr-xr-x 2 root root 4096 Feb 1 02:17 Desktop
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Finished
    -rw-r--r-- 1 root root 15078 Jan 31 23:54 install.log
    -rw-r--r-- 1 root root 2876 Jan 31 23:53 install.log.syslog
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Package
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Processing
    -rw-r--r-- 1 root root 0 Feb 1 03:06 Running
    -rw-r--r-- 1 root root 920 Feb 1 04:57 www.yang.com.crt
    -rw-r--r-- 1 root root 684 Feb 1 04:54 www.yang.com.csr
    -rw-r--r-- 1 root root 887 Feb 1 04:52 www.yang.com.key


    [root@centos5 ~]# vi /etc/httpd/conf.d/ssl.conf 修改SSL的設置文件

    # When we also provide SSL we have to listen to the
    # the HTTPS port in addition.
    #
    Listen 443

    [root@centos5 ~]# /etc/rc.d/init.d/httpd restart 重啟服務
    Stopping httpd: [ OK ]
    Starting httpd: [ OK ]

    [root@centos5 ~]# netstat -ntpl |grep 443
    tcp 0 0 :::443 :::* LIST

    EN 10317/httpd
    Centos 5下配置https服務器的方法

    Centos 5下配置https服務器的方法
    注:本實驗以http://www.centospub.com/make/ssl.html為指導

    配置SSL虛擬主機

    #vi /etc/httpd/conf/httpd.conf

    NameVirtualHost 192.168.0.20:443

    NameVirtualHost 192.168.0.20:80
    <VirtualHost IP:192.168.0.20:443>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/html
    ServerName www. yang.com

    SSLEngine on
    SSLCertificateFile /etc/httpd/conf/www.yang.com.crt
    SSLCertificateKeyFile /etc/httpd/conf/www.yang.com.key

    ErrorLog logs/dummy-www.yang.com-error_log
    CustomLog logs/dummy-www.yang.com-access_log common
    </VirtualHost>
    <VirtualHost 192.168.0.20:443>
    ServerAdmin webmaster@dummy-host.example.com
    DocumentRoot /var/www/cgi-bin/openwebmail
    ServerName mail.yang.com

    SSLEngine on
    SSLCertificateFile /etc/httpd/conf/www.yang.com.crt
    SSLCertificateKeyFile /etc/httpd/conf/www.yang.com.key

    ErrorLog logs/dummy-www.yang.com-error_log
    CustomLog logs/dummy-www.yang.com-access_log common
    </VirtualHost>


    #vi /etc/httpd/conf.d/ssl.conf 添加下面的內容

    SSLEngine on
    SSLCertificateFile /etc/httpd/conf/www.yang.com.crt
    SSLCertificateKeyFile /etc/httpd/conf/www.yang.com.key

    發表評論 共有條評論
    用戶名: 密碼:
    驗證碼: 匿名發表
    一级特黄大片欧美久久久久_一本一道久久综合狠狠老_JLZZ日本人年轻护士_欧美男男作爱VIDEOS可播放
      <em id="hanht"></em>

      <dd id="hanht"></dd>

      <em id="hanht"><acronym id="hanht"></acronym></em>
      
      <button id="hanht"></button>
      <rp id="hanht"><object id="hanht"><blockquote id="hanht"></blockquote></object></rp><em id="hanht"></em>