Linux——apache
apache
企业常用的web服务,用来提供http://(超文本传输协议)
apache的安装部署
yum install httpd -y
rpm -qc httpd ##寻找配置文件
yum install httpd-manual ##安装manual
systemctl start httpd##火墙关掉阿帕其访问
systemctl enable httpd
systemctl stop firewalld.service
systemctl disable firewalld.service
http://172.25.254.108
http://172.25.254.108/manual
apache的基础信息
主配置目录: /etc/httpd/conf
主配置文件: /etc/httpd/conf/httpd.conf
子配置目录: /etc/httpd/conf.d/
子配置文件: /etc/httpd/conf.d/*.conf
默认发布目录: /var/www/html
默认发布文件: index.html
默认端口: 80
默认安全上下文: httpd_sys_content_t
程序开启默认用户: apache
apache日志: /etc/httpd/logs/*
修改默认端口
vim /etc/httpd/conf/httpd.conf
listen 8080 ##改为8080
systemctl restart httpd
172.25.254.108:8080
修改默认发布文件:
默认发布文件就是访问apache时没有指定文件名称时默认访问的文件
这个文件可以指定多个,有先后顺序
vim /etc/httpd/conf/httpd.conf
systemctl restart httpd
修改默认发布目录
mkdir -p /www/html
vim /www/html/index.html
/www/html/index.html
vim /etc/httpd/conf/httpd.conf
systemctl restart httpd
semanage fcontext -a -t httpd_sys_content_t ‘/www(/.*)?’ ##更改安全上下文
restorecon -RvvF /www/ ##同步
apache的虚拟机
mkdir /var/www/virtual/xiao.zhang.com/html -p
mkdir /var/www/virtual/xiao.li.com/html -p
vim /var/www/virtual/xiao.zhang.com/html/index.html
vim /var/www/virtual/xiao.li.com/html/index.html
cd /etc/httpd/conf.d
vim adefault.conf
vim xzhang.conf
ServerName xiao.zhang.com ##指定站点名称
“/var/www/virtual/xiao.zhang.com/html” ##站点默认发布目录
combined ##站点日志combined标志四种日志的集合
vim xli.conf
测试:
在测试主机中做好本地解析
vim /etc/hosts
172.25.254.108 xiao.zhang.com xiao.li.com www.want.com
apache内部访问控制
1.针对主机访问控制
vim adefault.conf
mkdir /var/www/html/test
vim /var/www/html/test/index.html
systemctl restart httpd
http://172.25.254.108/test/
2.用户方式的访问控制
htpasswd -cm /etc/httpd/userpass admin ##建立一个用户
htpasswd -m /etc/httpd/userpass admin1 ##再次建立一个用户
cat /etc/httpd/userpass ##查看用户信息
cd /etc/httpd/conf.d
vim adefault.conf
mkdir /var/www/html/admin
vim /var/www/html/admin/index.html
systemctl restart httpd
http://172.25.254.108/admin/
apache支持的语言
vim /etc/httpd/conf/httpd.conf
1.html
2.php
vim /var/www/html/index.php
yum install php -y
systemctl restart httpd
http://172.25.254.108/index.php
3.cgi
mkdir -p /var/www/html/cgi
semanage fcontext -a -t httpd_sys_script_exec_t ‘/var/www/html/cgi(/.*)?’
restorecon -RvvF /var/www/html/cgi
vim /var/www/html/cgi/index.cgi
chmod +x /var/www/html/cgi/index.cgi
/var/www/html/cgi/index.cgi
vim /etc/httpd/conf.d/a.conf
systemctl restart httpd
http://172.25.254.108/cgi/index.cgi
http://172.25.254.108/cgi/
https保护客户数据传输不被**
ss -antlupe | grep 443
yum install mod_ssl -y
yum install crypto-utils -y
genkey www.van.com ##至少1024,越大越慢
vim /etc/httpd/conf.d/ssl.conf
systemctl restart httpd
https://172.25.254.108/
设定https虚拟主机并设定网页重写
mkdir -p /var/www/virtual/next.door.com/html
vim /var/www/virtual/next.door.com/html/index.html
vim /etc/httpd/conf.d/next.conf
systemctl restart httpd
^(/.*)$
##客户在浏览器地址栏输入的所有字符 https://
##强制客户加密访问 %{HTTP_HOST}
##客户请求主机 $1
##$1表示^的值 [redirect=301]
##访问规则临时转换 302永久转换
vim /etc/hosts
172.25.254.208 next.door.com
http://next.door.com