Linux——apache

apache

企业常用的web服务，用来提供http://(超文本传输协议)

apache的安装部署

yum install httpd -y

rpm -qc httpd ##寻找配置文件

yum install httpd-manual ##安装manual

systemctl start httpd##火墙关掉阿帕其访问
systemctl enable httpd
systemctl stop firewalld.service
systemctl disable firewalld.service

http://172.25.254.108

http://172.25.254.108/manual

apache的基础信息

主配置目录: /etc/httpd/conf
主配置文件: /etc/httpd/conf/httpd.conf
子配置目录: /etc/httpd/conf.d/
子配置文件: /etc/httpd/conf.d/*.conf
默认发布目录: /var/www/html
默认发布文件: index.html
默认端口： 80
默认安全上下文: httpd_sys_content_t
程序开启默认用户: apache
apache日志: /etc/httpd/logs/*

修改默认端口
vim /etc/httpd/conf/httpd.conf

listen 8080 ##改为8080
systemctl restart httpd

172.25.254.108:8080

修改默认发布文件:
默认发布文件就是访问apache时没有指定文件名称时默认访问的文件
这个文件可以指定多个，有先后顺序
vim /etc/httpd/conf/httpd.conf

systemctl restart httpd

修改默认发布目录
mkdir -p /www/html
vim /www/html/index.html
/www/html/index.html

vim /etc/httpd/conf/httpd.conf

systemctl restart httpd
semanage fcontext -a -t httpd_sys_content_t ‘/www(/.*)?’ ##更改安全上下文
restorecon -RvvF /www/ ##同步

apache的虚拟机

mkdir /var/www/virtual/xiao.zhang.com/html -p
mkdir /var/www/virtual/xiao.li.com/html -p
vim /var/www/virtual/xiao.zhang.com/html/index.html
vim /var/www/virtual/xiao.li.com/html/index.html

cd /etc/httpd/conf.d
vim adefault.conf

vim xzhang.conf

ServerName xiao.zhang.com ##指定站点名称
“/var/www/virtual/xiao.zhang.com/html” ##站点默认发布目录
combined ##站点日志combined标志四种日志的集合

vim xli.conf

测试：
在测试主机中做好本地解析
vim /etc/hosts

172.25.254.108 xiao.zhang.com xiao.li.com www.want.com

apache内部访问控制

1.针对主机访问控制
vim adefault.conf

mkdir /var/www/html/test
vim /var/www/html/test/index.html
systemctl restart httpd

http://172.25.254.108/test/

2.用户方式的访问控制

htpasswd -cm /etc/httpd/userpass admin ##建立一个用户
htpasswd -m /etc/httpd/userpass admin1 ##再次建立一个用户
cat /etc/httpd/userpass ##查看用户信息

cd /etc/httpd/conf.d
vim adefault.conf

mkdir /var/www/html/admin
vim /var/www/html/admin/index.html
systemctl restart httpd


http://172.25.254.108/admin/

apache支持的语言

vim /etc/httpd/conf/httpd.conf

1.html

2.php
vim /var/www/html/index.php

yum install php -y

systemctl restart httpd

http://172.25.254.108/index.php

3.cgi

mkdir -p /var/www/html/cgi
semanage fcontext -a -t httpd_sys_script_exec_t ‘/var/www/html/cgi(/.*)?’
restorecon -RvvF /var/www/html/cgi
vim /var/www/html/cgi/index.cgi

chmod +x /var/www/html/cgi/index.cgi
/var/www/html/cgi/index.cgi
vim /etc/httpd/conf.d/a.conf

systemctl restart httpd

http://172.25.254.108/cgi/index.cgi

http://172.25.254.108/cgi/

https保护客户数据传输不被破解

ss -antlupe | grep 443
yum install mod_ssl -y

yum install crypto-utils -y

genkey www.van.com ##至少1024，越大越慢
vim /etc/httpd/conf.d/ssl.conf

systemctl restart httpd

https://172.25.254.108/

设定https虚拟主机并设定网页重写

mkdir -p /var/www/virtual/next.door.com/html
vim /var/www/virtual/next.door.com/html/index.html
vim /etc/httpd/conf.d/next.conf

systemctl restart httpd

^(/.*)$##客户在浏览器地址栏输入的所有字符
https:// ##强制客户加密访问
%{HTTP_HOST} ##客户请求主机
$1 ##$1表示^的值
[redirect=301] ##访问规则临时转换 302永久转换

vim /etc/hosts
172.25.254.208 next.door.com

http://next.door.com