Web实验总-CSDN博客
| 阿里云国内75折 回扣 微信号：monov8 |
| 阿里云国际，腾讯云国际，低至75折。AWS 93折 免费开户实名账号 代冲值 优惠多多 微信号：monov8 飞机：@monov6 |
目录
网站需求
1.基于域名www.openlab.com可以访问网站内容为 welcome to openlab!!!
2.给该公司创建三个网站目录分别显示学生信息教学资料和缴费网站基于www.openlab.com/data网站访问教学资料
www.openlab.com/student 网站访问学生信息
www.openlab.com/money网站访问缴费网站
3.要求1学生信息网站只有song和tian两人可以访问其他网站所有用户用能访问。
2访问缴费网站实现数据加密基于https访问。
思路
1.准备工作设备的安装启动以及防火墙和SELinux的关闭
2.新建一个存储网页的目录同时建立子目录以及网页内容
3.修改本地hosts映射
4.修改配置文件: 新建/data以及/student子目录网站,
5.建立https的/money网站:
6.重启服务并在Linux经行测试。
实验步骤
第一步准备工作
[root@server ~]# setenforce 0
[root@server ~]# systemctl stop firewalld
[root@server ~]# yum install httpd mod_ssl
[root@server ~]# systemct1 start httpd
[root@server ~]# systemctl enable httpd
第二步新建一个存储网页的目录
[root@node2 ~]# mkdir -p /www/data
[root@node2 ~]# mkdir -p /www/student
[root@node2 ~]# mkdir -p /www/money[root@node2 ~]# echo "welcome to opemlab!" > /var/www/html/index.html
[root@node2 ~]# echo "Python book ,linux book" > /www/data/index.html
[root@node2 ~]# echo "student: Song And Tian" > /www/student/index.html
[root@node2 ~]# echo "give me money " > /www/money/index.html
第三步修改本地hosts映射
[root@node2 ~]# vim /etc/hosts
192.168.17.132 www.openlab.com
第四步修改配置文件建立基于http服务的网站
1)创建用户song和tian并修改密码为123456
[root@node2 ~]# useradd song
[root@node2 ~]# passwd song
[root@node2 ~]# useradd tian
[root@node2 ~]# passwd tian
2设置访问控制修改主配置文件
设置访问控制
[root@node2 ~]# htpasswd -c /etc/httpd/passwdop song
New password: # 登陆密码123456
Re-type new password:
Adding password for user song
[root@node2 ~]# htpasswd /etc/httpd/passwdop tian
New password: # 登陆密码123456
Re-type new password:
Adding password for user tian修改主配置文件
[root@node2 ~]# vim /etc/httpd/conf/httpd.conf # 定位第一行
<virtualhost 192.168.17.132> documentroot /www servername 192.168.17.132 <directory /www> allowoverride none require all granted </directory> </virtualhost> <virtualhost 192.168.17.132> documentroot /www/data alias /data /www/data servername 'data' <directory /www/data> allowoverride none require all granted </directory> </virtualhost> <virtualhost 192.168.17.132> documentroot /www/student alias /student /www/student servername 'student' <directory /www/student> allowoverride none authuserfile "/etc/httpd/passwdop" authname "My privately" authtype "basic" require user song tian </directory> </virtualhost>
第五步建立基于https的/money网站
创建私钥文件
[root@node2 ~]# openssl genrsa -aes128 2048 > /etc/pki/tls/private/mo.key
Enter PEM pass phrase: # 设置密码为123456
Verifying - Enter PEM pass phrase:创建数字证书
[root@node2 ~]# openssl req -utf8 -new -key /etc/pki/tls/private/mo.key -x509 -days 365 -out /etc/pki/tls/certs/mo.crt
# 指名该证书用到的私钥文件-key /etc/pki/tls/private/ftp.key
Enter pass phrase for /etc/pki/tls/private/mo.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
----- # 证书信息
Country Name (2 letter code) [XX]:86
State or Province Name (full name) []:shanxi
Locality Name (eg, city) [Default City]:xi'an
Organization Name (eg, company) [Default Company Ltd]:openlab
Organizational Unit Name (eg, section) []:RHCE
Common Name (eg, your name or your server's hostname) []:money
Email Address []:IHavemoney@more.com
[root@node2 ~]#修改ssl配置文件也可以写入主配置文件中
<virtualhost 192.168.17.132:443> sslengine on SSlcertificatefile /etc/pki/tls/certs/mo.crt SSLCertificateKeyFile /etc/pki/tls/private/mo.key servername 'money' documentroot /www/money alias /money /www/money <directory /www/money> allowoverride none require all granted </directory> </virtualhost>
第六步重启服务并在Linux经行测试
[root@node2 ~]# systemctl restart httpd
Enter TLS private key passphrase for money:443 (RSA) : ******
在Linux上使用firefox 命令打开浏览器用域名访问
访问
访问http://www.openlab.com/data/
访问: http://www.openlab.com/student
该步骤实验失败输入网址后会直接进入网站内部无法访问经行针对性访问。
原因未知
访问https://www.openlab.com/money/
