一.httpd-2.2版本安装及配置
1.安装httpd-2.2.3
#yun -y install httpd
2.查看httpd安装生成的文件
#rpm -ql httpd | less
3.启动服务
#service httpd start
4.开机自动启动服务
#chkconfig --add httpd
#chkconfig --level 345 httpd on
5.建立测试页面
#cd /var/www/html
#vim index.html
6.httpd服务的配置文件
#cd /etc/httpd/conf/
#cp httpd.conf httpd.conf.bak
7.编辑配置文件
#vim httpd.conf
ServerTokens Major
KeepAlive On
8.修改网站根目录
DocumentRoot "/web/html"
<Directory "/web/html">
Options none
AllowOverride None
Order deny,allow
Deny from 192.168.0.1 172.16.100.177
<Directory/>
9.检测配置文件是否语法正确
#httpd -t
10.linux下使用纯文本浏览器
#elinks http://ip
11.限定用户访问网站
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
AuthUserFile "/etc/httpd/conf/htpasswd"
Require valid-user 或 Require user hadoop
12.建立限定用户文件
# htpasswd -c -m /etc/httpd/conf/htpasswd hadoop
# htpasswd -m /etc/httpd/conf/htpasswd tom
13.重启服务
#service httpd restart
14.在电脑浏览器上测试是否设置成功（限定用户）
15.基于组限定访问
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
AuthUserFile "/etc/httpd/conf/htpasswd"
AuthGroupFile "/etc/httpd/conf/htgroup"
Require group myusers
16.建立用户组文件
#vim /etc/httpd/conf/htgroup
myusers: hadoop tom
17.重启服务
#service httpd restart
18.htpasswd命令删除用户
#htpasswd -D hadoop
19.虚拟主机的配置
首先要注释中心主机 DocumentRoot
20.在/etc/httpd/conf.d/目录下建立虚拟机配置文件
#vim /etc/httpd/conf.d/virtual.conf
NameVirtualHost 172.16.100.1:80
<VirtualHost 172.16.100.1:80〉
ServerName www.luochen.com
DocumentRoot "/web/luochen"
CustomLog /var/log/httpd/luochen/access_log combined
<Directory "/web/luochen">
Options none
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted Files"
AuthUserFile "/etc/httpd/conf/htpasswd"
Require valid-user 或 Require user hadoop
<Directory/>
</VirtualHost>
<VirtualHost 172.16.100.1:80〉
ServerName www.luo.com
DocumentRoot "/web/luo"
CustomLog /var/log/httpd/luo/access_log combined
<Directory "/web/luo">
Options none
AllowOverride None
Order deny,allow
Deny from 192.168.0.1 172.16.100.177
<Directory/>
</VirtualHost>
21.编辑windows下的hosts文件
172.16.100.1 www.luochen.com
172.16.100.1 www.luo.com
22.安装mod_ssl模块（htppd基于rpm包安装时）
#yum -y install mod_ssl
23.查看mod_ssl安装生成那些文件
#rpm -ql mod_ssl
24.自建CA （在172.16.100.10主机上）
#cd /etc/pki/CA
#(umask 077; openssl genrsa -out private/cakey.pem 2048; )
#vim /etc/pki/tls/openssl.cnf
[ req_distinguished_name ]
countryName_Default = CN
setOrProvinceName_default = HB
localityName_default = WUHAN
0.organizationName_default = COLLEGE
organizationalUnitName_default = Tech
25.openssl req -new -x509 -key private/cakey.pem -out cacert.pem -days 3650
hostname ca.luochen.com
26.编辑openssl文件
dir = /etc/pki/CA
27.创建相应的目录文件
#mkdir certs newcerts crl
#touch index.txt
#echo 01 > serial
28.在httpd服务目录下创建ssl目录（在172.16.100.1主机上）
#mkdir /etc/httpd/ssl
#(umask 077; openssl genrsa 2048 > httpd.key) //生成密钥
#openssl req -new -key httpd.key -out httpd.csr //生成证书颁发请求
hostname === ServerName
#scp http.csr 172.16.100.10:/tmp //将证书颁发请求复制到服务器端
29.在172.16.100.10主机上
#openssl ca -in /tmp/httpd.csr -out /tmp/httpd.crt -daya 3650 //生成证书
#cat /etc/pki/CA/serial //显示02即成功
30.将证书复制到客户端主机上（172.16.100.1）
#scp 172.16.100.10/tmp/httpd.crt ./ //将证书复制到客户端主机上
31.删除tmp目录下所有文件
#vim rm -rf ./*
32.编辑/etc/httpd/conf.d/ssl.conf 文件（172.16.100.1）
#vim /etc/httpd/conf.d/ssl.conf
<VirtualHost 172.16.100.1:443>
ServerName www.luochen.com
DocumentRoot "/web/www/luochen"
SSLCertificateFile /etc/httpd/ssl/httpd.crt
SSLCertificateKeyFile /etc/httpd/ssl/httpd.key
</VirtualHost>
33.重启httpd服务器
#service httpd restart
34.将CA的证书复制到windows主机上
/etc/pki/CA/cacert.pem //在172.16.100.10
35.在Windows主机上对证书进行重命名
cacert.pem cacert.crt
36.双击安装证书
37.最后在浏览器用https协议访问 验证
本文出自 “珞辰的博客” 博客，请务必保留此出处http://luochen2015.blog.51cto.com/9772274/1694457
原文地址：http://luochen2015.blog.51cto.com/9772274/1694457
