http-2.2.3에서 ssl 설치 | |||
 345  0  0  0 | |||
| ssl설치하다 아파치의 conf파일설정이 2.2.0부터는 변경되 삽질을 좀 했습니다. 그래서 변경된 설정내용을 적었습니다. httpd.conf 가 여러개로 나누어졌다는 것이 주내용입니다. conf/extra 아래 여러 conf 파일이 있습니다. 기본적인 설치내용이며 ssl은 rpm으로 기본설치된 상태에서 했습니다. php 컴파일시 xml관련 필요한 프로그램을 요구하는데, 설치하거나 옵션을 disable 해야합니다. ------------------------------------------------------------------------------------ 위치 : /usr/local/src/httpd-2.2.3 ./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl --with-ssl=/usr make make install 위치 : /usr/local/src/php-5.2.0 ./configure --prefix=/usr/local/php5 --with-mysql --with-apxs2=/usr/local/apache2/bin/apxs make make install cp php.ini-dist /usr/local/php5/lib/php.ini 위치 : /usr/local/apache2/ vim conf/httpd.conf DocumentRoot "/www/htdocs" ServerAdmin ADMIN@DOMAIN.COM # <Directory "/"> # Order deny,allow # Deny from all # </Directory> # 이런설정이 디폴트여서 사용하는 디렉토리의 Allow를 해주지 않으면 # 웹에서 접근시 403에러가 난다. # 웹에서 사용되는 가상호스트의 디렉토리에 대해 Allow from all 한다. <Directory "/www/htdocs"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> <Directory "/www/htdocs2"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> AddType application/x-httpd-php .php # 가상호스트사용을 위해서는 주석을 제거 Include conf/extra/httpd-vhosts.conf # ssl사용을 위해서는 주석을 제거 Include conf/extra/httpd-ssl.conf vim conf/extra/httpd-vhosts.conf # 가상호스트설정 내용이 파일에 들어 있으니 수정해야 한다. vim conf/extra/httpd-ssl.conf # DocumentRoot, ServerName, SSLCertificateFile, SSLCertificateKeyFile # 이와 관련된 내용만 수정하면 됨 # 인증관련파일은 인증서 구입한 곳에서 인증서생성 메뉴얼을 주더군요. # 구입한 인증서 crt, key 파일 위치로 변경 DocumentRoot "/www/htdocs" ServerAdmin ADMIN@DOMAIN.COM SSLCertificateFile /usr/local/apache2/conf/server.crt SSLCertificateKeyFile /usr/local/apache2/conf/server.key 실행 /usr/local/apache2/bin/apachectl start # startssl 이 더이상 되지 않는다. 그냥 start이다. https://WWW.DOMAIN.COM 에 들어가서 확인. httpd.conf, httpd-vhosts.conf, httpd-ssl.conf 파일내용. httpd.conf ---------------------------------------------------- ServerRoot "/usr/local/apache2" Listen 80 LoadModule php5_module modules/libphp5.so <IfModule !mpm_netware_module> User nobody Group nobody </IfModule> ServerAdmin ADMIN@DOMAIN.COM DocumentRoot "/www/htdocs" <Directory /> Options FollowSymLinks AllowOverride None Order deny,allow Deny from all </Directory> <Directory "/www/htdocs"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> <Directory "/www/htdocs2"> Options Indexes FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> <IfModule dir_module> DirectoryIndex index.php index.html </IfModule> <FilesMatch "^.ht"> Order allow,deny Deny from all Satisfy All </FilesMatch> ErrorLog logs/error_log LogLevel warn <IfModule log_config_module> LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i"" combined LogFormat "%h %l %u %t "%r" %>s %b" common <IfModule logio_module> LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i" %I %O" combinedio </IfModule> CustomLog logs/access_log common </IfModule> <IfModule alias_module> ScriptAlias /cgi-bin/ "/usr/local/apache2/cgi-bin/" </IfModule> <IfModule cgid_module> </IfModule> <Directory "/usr/local/apache2/cgi-bin"> AllowOverride None Options None Order allow,deny Allow from all </Directory> DefaultType text/plain <IfModule mime_module> TypesConfig conf/mime.types AddType application/x-compress .Z AddType application/x-gzip .gz .tgz AddType application/x-httpd-php .php </IfModule> Include conf/extra/httpd-vhosts.conf Include conf/extra/httpd-ssl.conf <IfModule ssl_module> SSLRandomSeed startup builtin SSLRandomSeed connect builtin </IfModule> httpd-vhosts.conf ---------------------------------------------------- NameVirtualHost *:80 <VirtualHost *:80> ServerAdmin ADMIN@DOMAIN.COM DocumentRoot /www/htdocs ServerName WWW.DOMAIN.COM ServerAlias DOMAIN.COM ErrorLog logs/www_error_log CustomLog logs/www_access_log common </VirtualHost> <VirtualHost *:80> ServerAdmin ADMIN@DOMAIN.COM DocumentRoot /www/htdocs2 ServerName WWW2.DOMAIN.COM ErrorLog logs/www2_error_log CustomLog logs/www2_access_log common </VirtualHost> httpd-ssl.conf ---------------------------------------------------- Listen 443 AddType application/x-x509-ca-cert .crt AddType application/x-pkcs7-crl .crl SSLPassPhraseDialog builtin SSLSessionCache shmcb:/usr/local/apache2/logs/ssl_scache(512000) SSLSessionCacheTimeout 300 SSLMutex file:/usr/local/apache2/logs/ssl_mutex <VirtualHost *:443> DocumentRoot "/www/htdocs" ServerName www.DOMAIN.COM:443 ServerAdmin ADMIN@DOMAIN.COM ErrorLog /usr/local/apache2/logs/error_log TransferLog /usr/local/apache2/logs/access_log SSLEngine on SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLCertificateFile /usr/local/apache2/conf/server.crt SSLCertificateKeyFile /usr/local/apache2/conf/server.key <FilesMatch ".(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> <Directory "/usr/local/apache2/cgi-bin"> SSLOptions +StdEnvVars </Directory> BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0 CustomLog /usr/local/apache2/logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b" </VirtualHost> Tags: ssl 
 | |||
| |||
| |||
| Login for comment |
31433