根据实际情况填写国家、组织、地区、公司名生成自签发证书,这部分主要为Apache增加SSL支持
分类:热门资源

作为生产条件,常常索要利用SSL来援救合同,这一部分首要为Apache扩展SSL帮助。

Apache-2.4+汤姆cat-7+SSL +VirtualHost+自签发证书安装测量试验

一、安装依懒软件包

1、安装apr软件包
# wget -c
#tar -jxvf apr-1.5.2.tar.bz2
#cd apr-1.5.2
# ./configure --prefix=/usr/
#make
# make install

2、安装apr-util软件包
# wget
#tar -jxvf apr-util-1.5.4.tar.bz2
#cd apr-util-1.5.4
#cd /usr/local/src/apr-util-1.5.4
#./configure --prefix=/usr/ --with-apr=/usr/
#make
#make install

3、安装pcre软件包
#wget -c
# tar -jxvf pcre-8.37.tar.bz2
#cd pcre-8.37
# ./configure --prefix=/usr/local/
#make
#make install

二、安装Apache软件包

#wget -c
#cd httpd-2.4.16
#./configure --prefix=/usr/local/apache-2.4 --enable-modules=all --enable-mods-shared=all --enable-ssl
#make
#make install

三、开启ssl支持
1、修改vi httpd.conf 开启
LoadModule ssl_module modules/mod_ssl.so
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
Include conf/extra/httpd-ssl.conf

四、生成自签发证书:
# cd /usr/local/apache-2.4/conf/
#openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout server.key -out server.crt
#基于真实情状填写国家、协会、地区、集团名生成自签发证书

五、运维Aapche软件测量检验。。
#/usr/local/apache-2.4/bin/apachectl start
注意防火墙开启443端口

六、Apache+Tomcat-7 联配

1、 安装JDK 略
# wget
# wget
2、安装Tomcat
# tar -zxvf apache-tomcat-7.0.64.tar.gz
# ln -s tomcat apache-tomcat-7.0.64

3、安装tomcat-connectors模块
# tar -zxvf tomcat-connectors-1.2.41-src.tar.gz
# cd tomcat-connectors-1.2.41-src
# ./ buildconf.sh
# ./configure --with-apxs=/usr/local/apache-2.4/bin/apxs --with-tomcat=/usr/local/tomcat --with-java-home=/usr/local/jdk --with-jni
#make
#make install

七、开启mod_jk模块

更正vi httpd.conf最终增添如下 开启 mod_jk module 支持

# Load mod_jk module
LoadModule jk_module modules/mod_jk.so
# Where to find workers.properties
JkWorkersFile /usr/local/apache/conf/workers.proferties
# Where to put jk logs
JkLogFile /usr/local/apache/logs/mod_jk.log

# Set the jk log level [debug/error/info]
JkLogLevel info

# Select the timestamp log format
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "

# JkRequestLogFormat set the request format
JkRequestLogFormat "%w %V %T"

# JkOptions indicate to send SSL KEY SIZE,
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories

# Send servlet for context /examples to worker named worker1
#JkMount /examples/*.jsp worker1
JkMount /servlet/* worker1

# Send JSPs for context /examples to worker named worker1
JkMount /*.jsp worker1

八、新建 workers.proferties 文件

[[email protected] conf]# more workers.proferties
workers.tomcat_home=/usr/local/tomcat
workers.java_home=/usr/local/jdk
ps=/
worker.list=worker1
worker.worker1.port=8009
worker.worker1.host=localhost
worker.worker1.type=ajp13
worker.worker1.connection_pool_timeout=600
worker.worker1.socket_keepalive=1
worker.worker1.lbfactor=1
worker.inprocess.stdout=$(workers.tomcat_home)$(ps)logs$(ps)inprocess.stdout
worker.inprocess.stderr=$(workers.tomcat_home)$(ps)logs$(ps)inprocess.stderr
[[email protected] conf]#

九、Apache+汤姆cat+SSL+设想主机:

1、纠正: httpd-ssl.conf 增多如下设想主机

<VirtualHost _default_:443>

# General setup for the virtual host
DocumentRoot "/www/clients/aaa.com/htdocs"
ServerName www.aaa.com:443
ServerAdmin [email protected]
ErrorLog "/www/clients/aaa.com/logs/error_log"
TransferLog "/www/clients/aaa.com/logs/access_log"

<Directory "/www/clients/aaa.com/htdocs">
Options -Indexes +FollowSymlinks
AllowOverride All
Require all granted
DirectoryIndex login.jsp index.jsp
</Directory>

#JkMount /examples/*.jsp worker1
JkMount /servlet/* worker1

# Send JSPs for context /examples to worker named worker1
JkMount /*.jsp worker1

# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.

SSLEngine on

SSLCertificateFile "/usr/local/apache-2.4/conf/server.crt"
SSLCertificateKeyFile "/usr/local/apache-2.4/conf/server.key"

<FilesMatch ".(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/usr/local/apache-2.4/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]"
nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0

CustomLog "/usr/local/apache-2.4/logs/ssl_request_log"
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"

</VirtualHost>

<VirtualHost _default_:443>

# General setup for the virtual host
DocumentRoot "/www/clients/bbb.com/htdocs"
ServerName www.bbb.com:443
ServerAdmin [email protected]
ErrorLog "/www/clients/bbb.com/logs/error_log"
TransferLog "/www/clients/bbb.com/logs/access_log"

<Directory "/www/clients/bbb.com/htdocs">
Options -Indexes +FollowSymlinks
AllowOverride All
Require all granted
DirectoryIndex login.jsp index.jsp
</Directory>

#JkMount /examples/*.jsp worker1
JkMount /servlet/* worker1

# Send JSPs for context /examples to worker named worker1
JkMount /*.jsp worker1

# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.

SSLEngine on

SSLCertificateFile "/usr/local/apache-2.4/conf/server.crt"
SSLCertificateKeyFile "/usr/local/apache-2.4/conf/server.key"

<FilesMatch ".(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/usr/local/apache-2.4/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]"
nokeepalive ssl-unclean-shutdown
downgrade-1.0 force-response-1.0

CustomLog "/usr/local/apache-2.4/logs/ssl_requbbest_log"
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"

</VirtualHost>

十、加多汤姆cat设想主机:

1、校正:汤姆cat的配置文件 server.xml 增多如下:

<Host name="aaa.com" appBase="webapps" unpackWARs="true" autoDeploy="true">

<Alias>www.aaa.com</Alias>

<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
prefix="aaa.com_access_log." suffix=".txt"
pattern="%h %l %u %t "%r" %s %b" />

<Context path="" docBase="/www/clients/aaa.com/htdocs"
debug="0" reloadable="true"/>
</Host>

<Host name="bbb.com" appBase="webapps" unpackWARs="true" autoDeploy="true">

<Alias>www.bbb.com</Alias>

<Valve className="org.apache.catalina.authenticator.SingleSignOn" />
<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
prefix="bbb.com_access_log." suffix=".txt"
pattern="%h %l %u %t "%r" %s %b" />

<Context path="" docBase="/www/clients/bbb.com/htdocs"
debug="0" reloadable="true"/>
</Host>

十九、编写测量试验页面:

[[email protected] htdocs]# pwd
/www/clients/aaa.com/htdocs
[[email protected] htdocs]# more index.jsp
<HTML>
<HEAD>
<TITLE>JSP测验页面</TITLE>
</HEAD>
<BODY>
<%out.println("<h1>Hello wwww.aaa.com World! </h1>");%>
</BODY>
</HTML>
[[email protected] htdocs]#

[[email protected] htdocs]# pwd
/www/clients/bbb.com/htdocs
[[email protected] htdocs]# more index.jsp
<HTML>
<HEAD>
<TITLE>JSP测验页面</TITLE>
</HEAD>
<BODY>
<%out.println("<h1>Hello wwww.bbb.com World! </h1>");%>
</BODY>
</HTML>
[[email protected] htdocs]#

十九、运行: apache、tomcat举行测验
# /usr/local/apache/bin/apachectl start
# /usr/local/tomcat/bin/startup.sh

2、修正本机主机hosts 测验

附:优化Tomcat参数:改进:catalina.sh文件 扩展如下青色字
# Set juli LogManager config file if it is present and an override has not been issued
if [ -z "$LOGGING_CONFIG" ]; then
if [ -r "$CATALINA_BASE"/conf/logging.properties ]; then
LOGGING_CONFIG="-Djava.util.logging.config.file=$CATALINA_BASE/conf/logging.properties"
else
# Bugzilla 45585
LOGGING_CONFIG="-Dnop"
fi
fi
JAVA_OPTS="-server -Xms256m -Xmx2048m -XX:PermSize=64M -XX:MaxNewSize=256m -XX:MaxPermSize=512m "

+VirtualHost+自签发证书安装测量试验 一、安装依懒软件包 1、安装apr软件包 # wget -c ...

六、配置apache支持ssl:

1、校勘Apache配置文件:vi /usr/local/apache/conf/确认保证两面那行未有被讲授:LoadModule ssl_module modules/mod_ssl.soInclude conf/extra/

再结构一个设想主机(可配备成xxx.dingl.com,依据购销的SSL证书设置State of Qatar:VirtualHost *:80ServerName /home/dingl/jsp-web

ResinConfigServer localhost 6800

AddHandler caucho-request jspAddHandler caucho-request xtpAddHandler caucho-request vm/VirtualHost

2、改进ssl配置文件:vi /usr/local/apache/conf/extra/改革成如下方式:

Listen 443

AddType application/x-x509-ca-cert .crtAddType application/x-pkcs7-crl .crl

SSLPassPhraseDialog builtin

SSLSessionCache shmcb:/usr/local/apache/logs/ssl_scache(512000)SSLSessionCacheTimeout 300

SSLMutex file:/usr/local/apache/logs/ssl_mutex

#### SSL Virtual Host Context##VirtualHost _default_:443

# General setup for the virtual hostDocumentRoot /home/dingl/jsp-webServerName you@example.comErrorLog /usr/local/apache/logs/error_logTransferLog /usr/local/apache/logs/access_log

# SSL Engine Switch:# Enable/Disable SSL for this virtual host.SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /usr/local/apache/conf/dingl.com.crt#SSLCertificateFile /usr/local/apache/conf/server-dsa.crt

SSLCertificateKeyFile /usr/local/apache/conf/dingl.com.key

本文由威尼斯在线注册平台发布于热门资源,转载请注明出处:根据实际情况填写国家、组织、地区、公司名生成自签发证书,这部分主要为Apache增加SSL支持

上一篇:威尼斯正规官网坐落于Symfony的命名空间下,能够对命名空间申明为其它别名 下一篇:没有了
猜你喜欢
热门排行
精彩图文