啓用壓縮模塊和實驗https與https的重定向

實驗：啓用壓縮

1.查看是否加載使用該模塊功能

httpd -M | grep deflate

2.修改配置文件

vim /etc/httpd/conf.d/vhosts.conf

<virtualhost *:80>  
documentroot /data/site1  
servername www.a.com  
<directory /data/site1>   
require all granted  
</directory>  
CustomLog "logs/a_access_log" combined  
AddOutputFilterByType DEFLATE text/plain  
AddOutputFilterByType DEFLATE text/html  
DeflateCompressionLevel 9  

實驗：實現HTTPS

1.CA和證書頒發

mkdir /data/ssl/
cd /data/ssl/
( umask 066;openssl genrsa 2048 > cakey.pem )

openssl req -new -x509 -key cakey.pem -out cacert.pem -days 3650

openssl req -newkey rsa:1024 -nodes -keyout httpd.key > httpd.csr

openssl x509 -req -in httpd.csr -CA cacert.pem -CAkey cakey.pem -set_serial 01 > httpd.crt

scp -r /data/ssl 192.168.36.7:/etc/httpd/conf.d

將證書拷貝至申請證書的機器

2.httpd服務器配置

yum install mod_ssl

vim /etc/httpd/conf.d/ssl.conf

DocumentRoot "/data/site1/"  
ServerName www.a.com:443  
<directory /data/site1>  
require all granted  
</directory>  

SSLCertificateFile /etc/httpd/conf.d/ssl/httpd.crt  
SSLCertificateKeyFile /etc/httpd/conf.d/ssl/httpd.key  
SSLCACertificateFile /etc/httpd/conf.d/ssl/cacert.pem    

實驗：Http到https重定向

vim /etc/httpd/conf.d/test2.conf

#redirect temp / https://www.a.com/  
Header always set Strict-Transport-Security "max-age=31536000"  
RewriteEngine on  
RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=302]