主頁 > 知識庫 > Centos6.3下Apache配置基于加密的認證https加密證書訪問

Centos6.3下Apache配置基于加密的認證https加密證書訪問

熱門標簽:陽江智能電銷機器人 省份地圖標注 灰谷地圖標注 江蘇客服外呼系統(tǒng)怎么樣 平頂山手機自動外呼系統(tǒng)違法嗎 南寧銷售電銷機器人廠家 地圖標注軌跡 科研地圖標注 辦理400電話怎么劃傷

 這里簡單演示一下Apache下基于加密的認證訪問----https加密方式訪問。

1.DNS解析解析情況:

[root@localhost html]# nslookup www.downcc.com

Server:         192.168.2.115

Address:        192.168.2.115#53

Name:   www.downcc.com

Address: 192.168.2.115

2.安裝Apache SSL支持模塊:# yum install -y mod_ssl (默認yum安裝httpd是沒有安裝該模塊的,安裝后自動生產(chǎn)/etc/httpd/conf.d/ssl.conf文件)并生成證書。

[root@localhost certs]# pwd

/etc/pki/tls/certs

[root@localhost certs]# ls

ca-bundle.crt        index.html      localhost.crt    Makefile

ca-bundle.trust.crt  localhost1.crt  make-dummy-cert

[root@localhost certs]# openssl req -utf8 -new -key ../private/localhost.key -x509 -days 3650 -out abc_com.crt

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [XX]:CN

State or Province Name (full name) []:510510

Locality Name (eg, city) [Default City]:GZ

Organization Name (eg, company) [Default Company Ltd]:ABC.COM

Organizational Unit Name (eg, section) []:Mr.Zhang

Common Name (eg, your name or your server's hostname) []:www.downcc.com

Email Address []:root@abc.com

[root@localhost certs]#

3.配置Apache,基本配置這里不多說了,下面是配置www.downcc.com站點http訪問的情況。

[root@localhost html]# tail -n 8 /etc/httpd/conf/httpd.conf

NameVirtualhost 192.168.2.115:80

VirtualHost www.downcc.com:80>

    ServerAdmin webmaster@dummy-host.example.com

    DocumentRoot /var/www/html

    ServerName www.downcc.com

    ErrorLog logs/dummy-host.example.com-error_log

    CustomLog logs/dummy-host.example.com-access_log common

/VirtualHost>

[root@localhost html]# tail /var/www/html/index.html                      

www.downcc.com

[root@localhost html]#

4.配置Apache支持https訪問www.downcc.com站點,編輯 vim /etc/httpd/conf.d/ssl.conf 文件,制定www.downcc.com站點https訪問時的相關(guān)信息。添加下面配置。

VirtualHost www.downcc.com:443>

DocumentRoot "/var/www/html/www.kuteatest.net"    #//為了顯示效果,這里的站點目錄不一樣,一般情況一個域名應(yīng)該指向同一目錄的。

ServerName www.downcc.com:443

ErrorLog logs/ssl_error_log

TransferLog logs/ssl_access_log

LogLevel warn

SSLEngine on

SSLProtocol all -SSLv2

SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

SSLCertificateFile /etc/pki/tls/certs/abc_com.crt

SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

Files ~ "\.(cgi|shtml|phtml|php3?)$">

    SSLOptions +StdEnvVars

/Files>

Directory "/var/www/cgi-bin">

    SSLOptions +StdEnvVars

/Directory>

SetEnvIf User-Agent ".*MSIE.*" \

         nokeepalive ssl-unclean-shutdown \

         downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \

          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \&;%r\&; %b"

/VirtualHost>

5.重啟Apache服務(wù),測試訪問。

測試http訪問的結(jié)果

測試https訪問的結(jié)果

查看證書信息和自建crt信息一致

https訪問的最終結(jié)果

標簽:通化 瀘州 泰安 蕪湖 儋州 玉溪 臨汾 玉樹

巨人網(wǎng)絡(luò)通訊聲明:本文標題《Centos6.3下Apache配置基于加密的認證https加密證書訪問》,本文關(guān)鍵詞  Centos6.3,下,Apache,配置,基于,;如發(fā)現(xiàn)本文內(nèi)容存在版權(quán)問題,煩請?zhí)峁┫嚓P(guān)信息告之我們,我們將及時溝通與處理。本站內(nèi)容系統(tǒng)采集于網(wǎng)絡(luò),涉及言論、版權(quán)與本站無關(guān)。
  • 相關(guān)文章
  • 下面列出與本文章《Centos6.3下Apache配置基于加密的認證https加密證書訪問》相關(guān)的同類信息!
  • 本頁收集關(guān)于Centos6.3下Apache配置基于加密的認證https加密證書訪問的相關(guān)信息資訊供網(wǎng)民參考!
  • 推薦文章