【RHCE】第13题:配置安全web服务

技术

红帽认证7.0【RHCE】第13题:配置安全web服务

yum install mod_ssl
firewall-cmd –permanent –add-service=https
firewall-cmd –reload
firewall-cmd –list-all

mkidr /etc/httpd/certs
wget -P /etc/httpd/certs/ http://server.group8.example.com/pub/tls/certs/system1.crt
wget -P /etc/httpd/certs/ http://server.group8.example.com/pub/tls/private/system1.key
wget -P /etc/httpd/certs/ http://server.group8.example.com/pub/tls/certs/ssl-ca.crt

vi /etc/httpd/conf.d/web.conf
<VirtualHost *:443>
ServerName system1.group8.example.com
DocumentRoot /var/www/html
<Directory /var/www/html>
order allow,deny
allow from all
deny from 172.13.8.0/24
</Directory>

SSLEngine on
SSLCertificateFile /etc/httpd/certs/system1.crt
SSLCertificateKeyFile /etc/httpd/certs/system1.key
SSLCACertificateFile /etc/httpd/certs/ssl-ca.crt
</VirtualHost>

httpd -t
systemctl restart httpd