RHCE(第四天)
网站需求：请给openlab搭建web网站
1.基于域名[www.openlab.com](http://www.openlab.com)可以访问网站内容为 welcome to openlab!!!
更改配置文件 （虚拟主机标签的示例参考文件：/usr/share/doc/httpd/httpd-vhosts.conf）
[root@localhost ~]# vim /etc/httpd/conf.d/vhosts.conf
DocumentRoot /www/openlab #网页文件存放目录
ServerName www.openlab.com #服务器域名
AllowOverride none
Require all granted
利用本机的/etc/hosts文件做域名解析
[root@localhost ~]# vim /etc/hosts
192.168.101.200 www.openlab.com
创建网页根目录
[root@localhost ~]# mkdir -p /www/openlab
编辑网页内容
[root@localhost ~]# echo 'welcome to openlab!!!' > /www/openlab/index.html
重启hppd服务
[root@localhost ~]# systemctl restart httpd
[root@localhost ~]# setenforce 0
Client主机测试
[root@localhost ~]# curl www.openlab.com
welcome to openlab!!!
2.给该公司创建三个子界面分别显示学生信息，教学资料和缴费网站，基于 [www.openlab.com/student](http://www.openlab.com/student) 网站访问学生信息， [www.openlab.com/data](http://www.openlab.com/data)网站访问教学资料 [www.openlab.com/money网站访问缴费网站](http://www.openlab.com/money网站访问缴费网 站)。
3.要求 （1）学生信息网站只有song和tian两人可以访问，其他用户不能访问。 （2）访问缴费网站实现数据加密基于https访问。
更改配置文件
[root@localhost ~]# vim /etc/httpd/conf.d/vshots.conf
DocumentRoot /www/openlab
Alias /data /www/openlab/data
ServerName www.openlab.com
重启httpd服务
[root@localhost ~]# systemctl restart httpd
创建/data网页根目录
[root@localhost ~]# mkdir /www/openlab/data
编辑网页内容
[root@localhost ~]# echo 'this is openlab data' > /www/openlab/data/index.html
Client主机测试
[root@localhost ~]# curl www.openlab.com/data/
this is openlab data
挂载光盘到/mnt
[root@localhost ~]# mount /dev/sr0 /mnt
mount: /mnt: WARNING: device write-protected, mounted read-only.
下载mod_ssl 软件包
[root@localhost ~]# yum install mod_ssl -y
制作秘钥及证书
[root@localhost ~]# openssl req -newkey rsa:4096 -nodes -sha256 -keyout /etc/pki/tls/private/openlab.key -x509 -days 365 -out /etc/pki/tls/certs/openlab.crt
Generating a RSA private key
...........................................................................................++++
..............................................++++
writing new private key to '/etc/pki/tls/private/openlab.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:86
State or Province Name (full name) []:shannxi
Locality Name (eg, city) [Default City]:xi'an
Organization Name (eg, company) [Default Company Ltd]:openlab
Organizational Unit Name (eg, section) []:ce
Common Name (eg, your name or your server's hostname) []:localhost
Email Address []:admin
更改配置文件
[root@localhost ~]# vim /etc/httpd/conf.d/vshots.conf
DocumentRoot /www/openlab
Alias /money /www/openlab/money
ServerName www.openlab.com
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/openlab.crt
SSLCertificateKeyFile /etc/pki/tls/private/openlab.key
创建网页文件根目录
[root@localhost ~]# mkdir /www/openlab/money
编辑子网页money内容
[root@localhost ~]# echo 'this is openlab money' > /www/openlab/money/index.html
重启httpd服务
[root@localhost ~]# systemctl restart httpd
Client主机测试
[root@localhost ~]# curl --insecure https://www.openlab.com/money/
this is openlab money
更改配置文件
[root@server ~]# vim /etc/httpd/conf.d/vshots.conf
DocumentRoot /www/openlab
Alias /student /www/openlab/student
ServerName www.openlab.com
AuthType Basic
AuthName "Please login:..."
AuthuserFile /etc/httpd/usrfile
Require user song tian
创建用户 指定用户名及密码
[root@localhost ~]# htpasswd -c /etc/httpd/userfile song
New password:
Re-type new password:
Adding password for user song
[root@server ~]# htpasswd /etc/httpd/userfile tian
New password:
Re-type new password:
Adding password for user tian
创建网页文件根目录
[root@server ~]# mkdir /www/openlab/student
重启httpd服务
[root@server ~]# systemctl restart httpd
访问/student 子页面
