httpd源码编译, 配置vhost

灰太狼 2023-06-25 14:26 10阅读 0赞

最新版httpd仓库：[https://repo.codeit.guru/][https_repo.codeit.guru]

### 文章目录 ###

*  1, httpd2.4: (允许目录权限：Require all granted)
 *   *  a, 源码编译httpd
     *  b, url跳转:Alias , Redirect
     *  c, 配置httpd的vhost(虚拟主机)
     *   *  1, 基于hostname
         *  2, 基于port
         *  3, 基于IP
     *  d, 访问控制：用户登录
     *  e, ssl 加密
     *   *  某个端口启用https
         *  全站https
 *  2, httpd2.2: (允许目录权限：Allow from all)
 *   *  a, 基于port

# 1, httpd2.4: (允许目录权限：Require all granted) #

## a, 源码编译httpd ##

官网指南：[http://httpd.apache.org/docs/2.4/install.html][http_httpd.apache.org_docs_2.4_install.html]  
其他博客参考： [https://www.cnblogs.com/ysuwangqiang/p/11445487.html][https_www.cnblogs.com_ysuwangqiang_p_11445487.html]

# 1， 下载依赖源码包: apr, apr-util , pcre 
    # pcre需要编译安装
    # apr, apr-util解压到apache-xx/src/lib/目录下（不带版本号）
    [root@c7 ~]# ls httpd-2.4.41/srclib/
    apr  apr-util  Makefile  Makefile.in
    
    # 2, 下载编译工具
    yum groupinstall "Development tools"
    yum -y install expat-devel 
    
    # 3， 编译安装
    ./configure --prefix=/usr/local/apr ; make && make install 
    ./configure --prefix=/usr/local/apr-util ; make && make install 
    ./configure --prefix=/usr/local/pcre --with-apr=/usr/local/apr/ ; make && make install 
    
    ./configure \
     --prefix=/usr/local/apache2\
     --enable-rewrite \
     --with-apr=/usr/local/apr \
     --with-apr-util=/usr/local/apr-util \
     --with-pcre=/usr/local/pcre/  #或bin/pcre-config二进制文件所在的路径
    make && make install
    
    # 4，启动httpd
    cp /usr/local/httpd2.4/bin/apachectl /etc/init.d/httpd
    sed -i "2i#chkconfig: 235 20 80" /etc/init.d/httpd
    chkconfig httpd on 
    service httpd start
    #/usr/local/apache2/bin/apachectl -k start
    [vagrant@c6 ~]$ ls /usr/local/httpd2.4/htdocs/
    index.html  
    
    [vagrant@c6 ~]$ cat /usr/local/httpd2.4/htdocs/index.html 
    <html><body><h1>It works!</h1></body></html>
    [vagrant@c6 ~]$ curl localhost/index.html
    <html><body><h1>It works!</h1></body></html>

## b, url跳转:Alias , Redirect ##

[root@c7 conf.d]# cat url_change.conf 
    #防止目录列表中文乱码
    IndexOptions Charset=UTF-8
    
    
    #修改文件访问路径 （展示文件目录列表，提供下载，访问）
    Alias /test "/var/httpd/test"
    <Directory "/var/httpd/test">
      Options Indexes FollowSymLinks
      Require all granted
    </Directory>
    
    #重定向：跳转新链接
    <Location "/one">
        Redirect permanent "https://www.baidu.com"
    </Location>

## c, 配置httpd的vhost(虚拟主机) ##

官网指南：[http://httpd.apache.org/docs/2.4/vhosts/][http_httpd.apache.org_docs_2.4_vhosts]

### 1, 基于hostname ###

[root@c7 conf.d]# cat vhost_hostname.conf 
    #防止目录列表中文乱码
    IndexOptions Charset=UTF-8
    
    <Directory /www/* >
        AllowOverride None
        Require all granted
        #Options Indexes FollowSymLinks
    </Directory>
    
    <VirtualHost *:80>
        ServerName www.a.com
        ServerAlias a.com 
        DocumentRoot "/www/a"
    </VirtualHost>
    
    <VirtualHost *:80>
        ServerName www.b.com
        DocumentRoot "/www/b"
    </VirtualHost>
    
    #配置站点访问文件
    [root@c7 conf.d]# mkdir -p /www/{a,b}
    [root@c7 conf.d]# echo "aa" >/www/a/index.html
    [root@c7 conf.d]# echo "bb" >/www/b/index.html
    [root@c7 conf.d]# cat /etc/hosts
    192.168.56.104 c7 www.a.com www.b.com
    
    # 重载httpd服务
    [root@c7 conf.d]# systemctl reload httpd
    [root@c7 conf.d]# curl http://a.com
    aa
    [root@c7 conf.d]# curl http://www.a.com
    aa
    [root@c7 conf.d]# curl http://www.b.com
    bb

### 2, 基于port ###

[root@c7 conf.d]# cat vhost_port.conf 
    #防止目录列表中文乱码
    IndexOptions Charset=UTF-8
    
    <Directory /www/vhosts/*> 
        AllowOverride None
        Require all granted 
        #Options Indexes FollowSymLinks
    </Directory>
    
    Listen 180
    <VirtualHost 192.168.56.104:180>
        ServerAdmin webmaster@www1.example.com
        DocumentRoot "/www/vhosts/www1"
        ServerName www1.example.com
        ErrorLog "/www/logs/www1/error_log"
        CustomLog "/www/logs/www1/access_log" combined
    </VirtualHost>
    
    Listen 280
    <VirtualHost 192.168.56.104:280>
        ServerAdmin webmaster@www2.example.org
        DocumentRoot "/www/vhosts/www2"
        ServerName www2.example.org
        ErrorLog "/www/logs/www2/error_log"
        CustomLog "/www/logs/www2/access_log" combined
    </VirtualHost>
    
    
    #配置站点访问文件
    [root@c7 ~]# mkdir /www/{vhosts,logs}/www{1,2} -p
    [root@c7 conf.d]# echo "www1.example.com"> /www/vhosts/www1/index.html
    [root@c7 conf.d]# echo "www2.example.com"> /www/vhosts/www2/index.html
    
    [root@c7 conf.d]# curl 192.168.56.104:180
    www1.example.com
    [root@c7 conf.d]# curl 192.168.56.104:280
    www2.example.com

### 3, 基于IP ###

[root@c7 conf.d]# cat vhost_ip.conf 
    #防止目录列表中文乱码
    IndexOptions Charset=UTF-8
    
    <Directory /www/vhosts/*> 
        AllowOverride None
        Require all granted 
        #Options Indexes FollowSymLinks
    </Directory>
    
    <VirtualHost 192.168.56.104:80>
        ServerAdmin webmaster@www1.example.com
        DocumentRoot "/www/vhosts/www1"
        ServerName www1.example.com
        ErrorLog "/www/logs/www1/error_log"
        CustomLog "/www/logs/www1/access_log" combined
    </VirtualHost>
    
    <VirtualHost 10.0.2.15:80>
        ServerAdmin webmaster@www2.example.org
        DocumentRoot "/www/vhosts/www2"
        ServerName www2.example.org
        ErrorLog "/www/logs/www2/error_log"
        CustomLog "/www/logs/www2/access_log" combined
    </VirtualHost>
    
    
    
    #查看主机的 多个网卡设备地址
    [root@c7 conf.d]# ip addr
    1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
        link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
        inet 127.0.0.1/8 scope host lo
           valid_lft forever preferred_lft forever
        inet6 ::1/128 scope host 
           valid_lft forever preferred_lft forever
    2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
        link/ether 08:00:27:21:94:45 brd ff:ff:ff:ff:ff:ff
        inet 10.0.2.15/24 brd 10.0.2.255 scope global noprefixroute dynamic enp0s3
           valid_lft 57470sec preferred_lft 57470sec
        inet6 fe80::4d9f:62b0:7183:4082/64 scope link noprefixroute 
           valid_lft forever preferred_lft forever
    3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
        link/ether 08:00:27:3e:b2:95 brd ff:ff:ff:ff:ff:ff
        inet 192.168.56.104/24 brd 192.168.56.255 scope global noprefixroute enp0s8
           valid_lft forever preferred_lft forever
        inet6 fe80::b0d9:883b:4a3c:287e/64 scope link noprefixroute 
           valid_lft forever preferred_lft forever
    
    
    #配置站点访问文件
    [root@c7 ~]# mkdir /www/{vhosts,logs}/www{1,2} -p
    [root@c7 conf.d]# echo "www1.example.com"> /www/vhosts/www1/index.html
    [root@c7 conf.d]# echo "www2.example.com"> /www/vhosts/www2/index.html
    
    [root@c7 conf.d]# systemctl restart httpd
    [root@c7 conf.d]# curl http://192.168.56.104:80
    www1.example.com
    [root@c7 conf.d]# curl http://10.0.2.15:80
    www2.example.com

## d, 访问控制：用户登录 ##

文档: (2.2, 2.4没有差别） [http://httpd.apache.org/docs/2.2/howto/auth.html][http_httpd.apache.org_docs_2.2_howto_auth.html]

*  2.2： <Directory 注释掉：Allow from all
 *  2.4： <Directory 注释掉：Require all granted

#创建密码文件
    [root@c7 conf.d]# htpasswd -c /usr/local/apache/passwd/passwords rbowen
    New password: mypassword
    Re-type new password: mypassword
    Adding password for user rbowen
    [root@c7 conf.d]# cat /usr/local/apache/passwd/passwords
    rbowen:$apr1$1mHlOhlQ$LCIYOqvDq0/Z9W7mlzdBi.
    
    #配置访问控制策略
    [root@c7 conf.d]# cat vhost_port.conf 
    <Directory /www/vhosts/*> 
        AllowOverride None
        #Require all granted 
        #Options Indexes FollowSymLinks
    	
    	AuthType Basic
        AuthName "Restricted Files"
        AuthBasicProvider file
        AuthUserFile /usr/local/apache/passwd/passwords
        Require valid-user
    </Directory>

## e, ssl 加密 ##

文档：  
[http://httpd.apache.org/docs/current/ssl/ssl\_howto.html][http_httpd.apache.org_docs_current_ssl_ssl_howto.html]  
[http://httpd.apache.org/docs/current/mod/mod\_ssl.html\#sslcertificatefile][http_httpd.apache.org_docs_current_mod_mod_ssl.html_sslcertificatefile]

### 某个端口启用https ###

[root@c7 httpd]# yum install -y mod_ssl
    [root@c7 httpd]# rpm -ql mod_ssl
    /etc/httpd/conf.d/ssl.conf
    /etc/httpd/conf.modules.d/00-ssl.conf
    /usr/lib/systemd/system/httpd-init.service
    /usr/lib/systemd/system/httpd.socket.d/10-listen443.conf
    /usr/lib64/httpd/modules/mod_ssl.so
    /usr/libexec/httpd-ssl-gencerts
    /usr/libexec/httpd-ssl-pass-dialog
    /usr/share/man/man8/httpd-init.service.8.gz
    /var/cache/httpd/ssl
    
    [root@c7 httpd]# cat /etc/httpd/conf.d/ssl.conf |grep -Ev '^#|^$'
    Listen 443 https
    Protocols h2 http/1.1
    SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
    SSLSessionCache         shmcb:/run/httpd/sslcache(512000)
    SSLSessionCacheTimeout  300
    SSLRandomSeed startup file:/dev/urandom  256
    SSLRandomSeed connect builtin
    SSLCryptoDevice builtin
    <VirtualHost _default_:443>
    ErrorLog logs/ssl_error_log
    TransferLog logs/ssl_access_log
    LogLevel warn
    SSLEngine on
    SSLProtocol +TLSv1.2 +TLSv1.3
    SSLProxyProtocol +TLSv1.2 +TLSv1.3
    SSLHonorCipherOrder on
    SSLCipherSuite "EECDH+AES128:EECDH+AES256:+SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RSA+3DES:!DSS"
    SSLProxyCipherSuite "EECDH+AES128:EECDH+AES256:+SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RSA+3DES:!DSS"
    
    ### 替换为自定义的证书：(配置文件根目录/etc/httpd/...)
    SSLCertificateFile conf/ssl/httpd/httpd.crt
    SSLCertificateKeyFile conf/ssl/httpd/httpd.key
    
    <FilesMatch "\.(cgi|shtml|phtml|php)$">
        SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory "/var/www/cgi-bin">
        SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-5]" \
             nokeepalive ssl-unclean-shutdown \
             downgrade-1.0 force-response-1.0
    CustomLog logs/ssl_request_log \
              "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
    </VirtualHost>

### 全站https ###

[root@c7-docker httpd]# tail /etc/httpd/conf/httpd.conf
    
    SSLEngine on
    SSLProtocol +TLSv1.2 +TLSv1.3
    SSLProxyProtocol +TLSv1.2 +TLSv1.3
    SSLHonorCipherOrder on
    SSLCipherSuite "EECDH+AES128:EECDH+AES256:+SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RSA+3DES:!DSS"
    SSLProxyCipherSuite "EECDH+AES128:EECDH+AES256:+SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:RSA+3DES:!DSS"
    SSLCertificateFile conf/ssl/httpd/httpd.crt
    SSLCertificateKeyFile conf/ssl/httpd/httpd.key
    <FilesMatch "\.(cgi|shtml|phtml|php)$">
        SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory "/var/www/cgi-bin">
        SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-5]" \
             nokeepalive ssl-unclean-shutdown \
             downgrade-1.0 force-response-1.0

# 2, httpd2.2: (允许目录权限：Allow from all) #

## a, 基于port ##

[root@c6 conf.d]# rpm -q httpd
    httpd-2.2.15-69.el6.centos.x86_64
    
    [root@c6 conf.d]# cat vhost.conf 
    #防止目录列表中文乱码
    IndexOptions Charset=UTF-8
    
    <Directory /www>
        AllowOverride None
        Options Indexes FollowSymLinks
        #which hosts can access an area of the server
        Allow from all
    </Directory>
    
    Listen 81
    #NameVirtualHost 192.168.56.109:81
    <VirtualHost 192.168.56.109:81>
        ServerAdmin webmaster@www1.example.com
        DocumentRoot "/www/vhosts/www1"
        ServerName www1.com
        ErrorLog "/www/logs/www1/error_log"
        CustomLog "/www/logs/www1/access_log" combined
    </VirtualHost>
    
    Listen 82
    <VirtualHost 192.168.56.109:82>
        ServerAdmin webmaster@www2.example.com
        DocumentRoot "/www/vhosts/www2"
        ServerName www2.com
        ErrorLog "/www/logs/www2/error_log"
        CustomLog "/www/logs/www2/access_log" combined
    </VirtualHost>
    
    
    #创建index.html
    [root@c6 conf.d]# echo index:80 > /var/www/html/index.html
    [root@c6 conf.d]# echo web1.index > /www/vhosts/www1/index.html
    [root@c6 conf.d]# echo web2.index > /www/vhosts/www2/index.html
    
    #访问测试
    [root@c6 conf.d]# curl c6:80
    index:80
    [root@c6 conf.d]# curl c6:81
    web1.index
    [root@c6 conf.d]# curl c6:82
    web2.index

[https_repo.codeit.guru]: https://repo.codeit.guru/
[http_httpd.apache.org_docs_2.4_install.html]: http://httpd.apache.org/docs/2.4/install.html
[https_www.cnblogs.com_ysuwangqiang_p_11445487.html]: https://www.cnblogs.com/ysuwangqiang/p/11445487.html
[http_httpd.apache.org_docs_2.4_vhosts]: http://httpd.apache.org/docs/2.4/vhosts/
[http_httpd.apache.org_docs_2.2_howto_auth.html]: http://httpd.apache.org/docs/2.2/howto/auth.html
[http_httpd.apache.org_docs_current_ssl_ssl_howto.html]: http://httpd.apache.org/docs/current/ssl/ssl_howto.html
[http_httpd.apache.org_docs_current_mod_mod_ssl.html_sslcertificatefile]: http://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatefile