RHCE第四天：给OPENLAB搭建web网站

1.基于域名www.openlab.com可以访问网站内容为 welcome to openlab！！！

#更改配置文件    （虚拟主机标签的示例参考文件：/usr/share/doc/httpd/httpd-vhosts.conf）

[root@localhost ~]# vim /etc/httpd/conf.d/vhosts.conf 

           #虚拟主机IP及端口
        DocumentRoot  /www/openlab        #网页文件存放目录
        ServerName www.openlab.com      #服务器域名

        AllowOverride none                          #不允许覆盖
        Require all granted                           #允许访问

#利用本机的/etc/hosts文件做域名解析

[root@localhost ~]# vim /etc/hosts
192.168.101.200  www.openlab.com

#创建网页根目录

[root@localhost ~]# mkdir -p /www/openlab

#编辑网页内容

[root@localhost ~]# echo 'welcome to openlab!!!' > /www/openlab/index.html

#重启hppd服务

[root@localhost ~]# systemctl restart httpd

[root@localhost ~]# setenforce 0

#Client主机测试

[root@localhost ~]# curl www.openlab.com

welcome to openlab!!!

2.给该公司创建的三个子页面分别显示学生信息，教学资料和缴费网站，基于www.openlab.com/stdent网站访问学生信息，www.openlab.com/data网站访问教学资料，www.openlab.com/money网站访问缴费网站。要求：学生信息网站只有tian和song两人可以访问，其他用户不能访问；访问缴费网站实现数据加密基于https访问。

1）data子页面

#更改配置文件

[root@localhost ~]# vim /etc/httpd/conf.d/vshots.conf

        DocumentRoot  /www/openlab

         #别名 /data   实际路径 /www/openlab/data
        Alias  /data    /www/openlab/data  
        ServerName  www.openlab.com

#重启httpd服务

[root@localhost ~]# systemctl restart httpd

#创建/data网页根目录

[root@localhost ~]# mkdir /www/openlab/data

#编辑网页内容

[root@localhost ~]# echo 'this is openlab data' > /www/openlab/data/index.html

#Client主机测试

[root@localhost ~]# curl www.openlab.com/data/
this is openlab data

2）访问缴费子页面基于https加密

#挂载光盘到/mnt

[root@localhost ~]# mount /dev/sr0 /mnt
mount: /mnt: WARNING: device write-protected, mounted read-only.

#下载mod_ssl 软件包

[root@localhost ~]# yum install mod_ssl -y

#制作秘钥及证书

[root@localhost ~]# openssl req -newkey rsa:4096 -nodes -sha256 -keyout /etc/pki/tls/private/openlab.key -x509 -days 365 -out /etc/pki/tls/certs/openlab.crt
Generating a RSA private key
...........................................................................................++++
..............................................++++
writing new private key to '/etc/pki/tls/private/openlab.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:86
State or Province Name (full name) []:shannxi         
Locality Name (eg, city) [Default City]:xi'an
Organization Name (eg, company) [Default Company Ltd]:openlab
Organizational Unit Name (eg, section) []:ce
Common Name (eg, your name or your server's hostname) []:localhost         
Email Address []:admin 

#更改配置文件

[root@localhost ~]# vim /etc/httpd/conf.d/vshots.conf 

        DocumentRoot  /www/openlab
        Alias  /money    /www/openlab/money
        ServerName  www.openlab.com
        SSLEngine on
        SSLCertificateFile /etc/pki/tls/certs/openlab.crt
        SSLCertificateKeyFile /etc/pki/tls/private/openlab.key

#创建网页文件根目录

[root@localhost ~]# mkdir /www/openlab/money

#编辑子网页money内容

[root@localhost ~]# echo 'this is openlab money' > /www/openlab/money/index.html

#重启httpd服务

[root@localhost ~]# systemctl  restart httpd

#Client主机测试

[root@localhost ~]# curl --insecure https://www.openlab.com/money/
this is openlab money

3）money子页面

#更改配置文件

[root@server ~]# vim /etc/httpd/conf.d/vshots.conf 

        DocumentRoot  /www/openlab
        Alias  /student    /www/openlab/student
        ServerName  www.openlab.com


        AuthType Basic
        AuthName "Please login:..."
        AuthuserFile /etc/httpd/usrfile
        Require user  song tian

#创建用户 指定用户名及密码

[root@localhost ~]# htpasswd -c /etc/httpd/userfile song
New password: 
Re-type new password: 
Adding password for user song
[root@server ~]# htpasswd /etc/httpd/userfile tian
New password: 
Re-type new password: 
Adding password for user tian

#创建网页文件根目录

[root@server ~]# mkdir /www/openlab/student

#重启httpd服务

[root@server ~]# systemctl restart httpd

访问/student 子页面