Instalando Apache, MariaDB e PHP com HTTPS no Arch Linux
No presente artigo iremos aprender a instalar os serviços Apache com SSL, MariaDB e PHP no Arch Linux.
[ Hits: 24.564 ]
Por: Rodrigo Leutz em 16/07/2018 | Blog: https://uware.com.br
MariaDB
1. Instalando MariaDB:
# pacman -S mysql
Saída deverá ser algo assim:
# mysql_install_db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
3. Agora habilite e inicialize o serviço:
# systemctl enable mysqld
# systemctl start mysqld
Verificando o serviço do MariaDB:
# systemctl status mysqld
Saída deverá ser algo assim:
# mysql_secure_installation
Saída deverá ser algo assim:
# pacman -S mysql
Saída deverá ser algo assim:
:: There are 2 providers available for mysql:
:: Repository extra
1) mariadb
:: Repository community
2) percona-server
Enter a number (default=1): << [ Enter ]
resolving dependencies...
looking for conflicting packages...
Packages (4) jemalloc-1:5.1.0-1 libmariadbclient-10.1.34-1 mariadb-clients-10.1.34-1
mariadb-10.1.34-1
Total Download Size: 32.49 MiB
Total Installed Size: 229.92 MiB
:: Proceed with installation? [Y/n] << [ Y ]
2. Agora vamos inicializar a base de dados do MariaDB, necessário antes de iniciar o serviço:
# mysql_install_db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
3. Agora habilite e inicialize o serviço:
# systemctl enable mysqld
# systemctl start mysqld
Verificando o serviço do MariaDB:
# systemctl status mysqld
Saída deverá ser algo assim:
● mariadb.service - MariaDB 10.1.34 database server
Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2018-07-06 12:02:33 -03; 5s ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 6750 ExecStartPost=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited>
Process: 6669 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= || VAR=`/usr/bin/ga>
Process: 6668 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited,>
Main PID: 6722 (mysqld)
Status: "Taking your SQL requests now..."
Tasks: 27 (limit: 4915)
Memory: 63.2M
CGroup: /system.slice/mariadb.service
└─6722 /usr/bin/mysqld
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Highest supported>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: 128 rollback segm>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Waiting for purge>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Percona XtraDB (>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Plugin 'FEEDBACK' is disa>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084282128128 [Note] InnoDB: Dumping buffer po>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Server socket created on >
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] /usr/bin/mysqld: ready fo>
Jul 06 12:02:33 arch mysqld[6722]: Version: '10.1.34-MariaDB' socket: '/run/mysqld/mysqld.sock' port:>
Jul 06 12:02:33 arch systemd[1]: Started MariaDB 10.1.34 database server.
4. Colocando password para o root:
# mysql_secure_installation
Saída deverá ser algo assim:
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none): << [ Enter ]
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] [ Enter ]
New password: [ Entre com o password ]
Re-enter new password: [ Digite novamente o password ]
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] [ Enter ]
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] [ Enter ]
... Success!
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] [ Enter ]
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] [ Enter ]
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
MariaDB está instalada e pronta para o uso!
Páginas do artigo
1. Apache2. MariaDB
3. PHP
4. HTTPS
Outros artigos deste autor
Leitura recomendada
Implementação de WAF mod_security e integração com Graylog utilizando Filebeat e Logstash
Bloqueando e desbloqueando falhas de login em SSH usando o pam_tally2
Convergência entre segurança física e lógica
Traduzindo plugins do OpenVAS/Nessus para português
OpenPGP - Tradução da man page
Comentários
[1] Comentário enviado por rleutz em 17/07/2018 - 16:59h
Corrigindo erros:
Instalando Apache, MariaDB e PHP com HTTPS no Arch Linux( Rodrigo Leutz )
Sistema: Linux arch 4.17.3-1-ARCH
Dominio: dominio.com.br
Ip: 192.168.0.1
Apache
1. Update do sistema
# pacman –Syu
2. Instalando Apache
# pacman –S apache
- Habilitando e iniciando servidor apache
# systemctl enable httpd
# systemctl restart httpd
- Verificando status do apache
# systemctl status httpd
- Saída devera ser algo assim:
? httpd.service - Apache Web Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2018-07-06 11:58:01 -03; 7s ago
Main PID: 6367 (httpd)
Tasks: 82 (limit: 4915)
Memory: 7.4M
CGroup: /system.slice/httpd.service
+-6367 /usr/bin/httpd -k start -DFOREGROUND
+-6368 /usr/bin/httpd -k start -DFOREGROUND
+-6369 /usr/bin/httpd -k start -DFOREGROUND
+-6370 /usr/bin/httpd -k start -DFOREGROUND
3. Testando apache
- Edite o arquivo http.conf
# nano /srv/http/index.html
- Insira as seguintes linhas
<html>
<title>Apache server</title>
<body>
<h2>Teste deu certo</h2>
</body>
</html>
- Agora acesse a página http://localhost ou http://192.168.0.1
MariaDB
1. Instalando MariaDB
# pacman -S mysql
- Saída devera ser algo assim:
:: There are 2 providers available for mysql:
:: Repository extra
1) mariadb
:: Repository community
2) percona-server
Enter a number (default=1): << [ Enter ]
resolving dependencies...
looking for conflicting packages...
Packages (4) jemalloc-1:5.1.0-1 libmariadbclient-10.1.34-1 mariadb-clients-10.1.34-1
mariadb-10.1.34-1
Total Download Size: 32.49 MiB
Total Installed Size: 229.92 MiB
:: Proceed with installation? [Y/n] << [ Y ]
2. Agora vamos inicializar a base de dados do MariaDB, necessário antes de iniciar o serviço
# mysql_install_db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
3. Agora habilite e inicialize o serviço
# systemctl enable mysqld
# systemctl start mysqld
- Verificando o serviço do MariaDB
# systemctl status mysqld
- Saída deverá ser algo assim:
? mariadb.service - MariaDB 10.1.34 database server
Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2018-07-06 12:02:33 -03; 5s ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 6750 ExecStartPost=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited>
Process: 6669 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= || VAR=`/usr/bin/ga>
Process: 6668 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited,>
Main PID: 6722 (mysqld)
Status: "Taking your SQL requests now..."
Tasks: 27 (limit: 4915)
Memory: 63.2M
CGroup: /system.slice/mariadb.service
+-6722 /usr/bin/mysqld
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Highest supported>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: 128 rollback segm>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Waiting for purge>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Percona XtraDB (>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Plugin 'FEEDBACK' is disa>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084282128128 [Note] InnoDB: Dumping buffer po>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Server socket created on >
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] /usr/bin/mysqld: ready fo>
Jul 06 12:02:33 arch mysqld[6722]: Version: '10.1.34-MariaDB' socket: '/run/mysqld/mysqld.sock' port:>
Jul 06 12:02:33 arch systemd[1]: Started MariaDB 10.1.34 database server.
4. Colocando password para o root
# mysql_secure_installation
- Saída deverá ser algo assim:
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none): << [ Enter ]
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] << [ Enter ]
New password: << [ Entre com o password ]
Re-enter new password: << [ Digite novamente o password ]
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] << [ Enter ]
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] << [ Enter ]
... Success!
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] << [ Enter ]
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] << [ Enter ]
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
MariaDB está instalada e pronta para o uso
PHP
1. Instalando o PHP
# pacman -S php php-apache
- Após a instalação edite o arquivo de configuração do apache
# nano /etc/httpd/conf/httpd.conf
- Encontre a seguite linha e comente
LoadModule mpm_event_module modules/mod_mpm_event.so
- Ficando:
#LoadModule mpm_event_module modules/mod_mpm_event.so
-E adicione as seguintes linhas ao final do arquivo
LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
LoadModule php7_module modules/libphp7.so
AddHandler php7-script php
Include conf/extra/php7_module.conf
2. Testando PHP
# nano /srv/http/test.php
- Adicione as seguintes linhas:
<?php
phpinfo();
?>
- Salve e saia
- Reinicie o apache
# systemctl restart httpd
3. Abra a página http://localhost/test.php ou http://192.168.0.1/test.php
- Deverá abrir as informações do PHP
HTTPS
1. Vamos criar as chaves
# cd /etc/httpd/conf
- Edite o arquivo httpd.conf
# nano httpd.conf
-Adicione as seguintes linhas ao final do arquivo para o apache escutar na porta 443
<IfModule mod_ssl.c>
Listen 443
</IfModule>
- Vamos criar as chaves ssl para o https
# openssl genrsa -out dominio.com.br.key 1024
# openssl req -new -key dominio.com.br.key -x509 -out dominio.com.br.crt -days 999
- Saída devera ser algo assim:
Generating a 2048 bit RSA private key
.................................................+++
..................+++
writing new private key to 'dominio.com.br.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]: << [ Pais ]
State or Province Name (full name) [Some-State]: << [ Estado ]
Locality Name (eg, city) []: << [ Cidade ]
Organization Name (eg, company) [Internet Widgits Pty Ltd]: << [ nome da empresa ]
Organizational Unit Name (eg, section) []: << [ Partição da empresa ]
Common Name (e.g. server FQDN or YOUR name) []: << [ Seu nome ]
Email Address []: << [ E-mail ]
# cat dominio.com.br.key dominio.com.br.crt > dominio.com.br.pem
# chmod 600 ultimatewebdesign*
2. Agora vamos ajustar o httpd.conf
# nano /etc/httpd/conf/httpd.conf
- Após a linha - Listen 80 – Adicione as seguintes linhas ficando desta maneira
Listen 80
<VirtualHost *:80>
ServerName dominio.com.br
# Linha abaixo força a entrada da 80 para a 443 forçando a https
Redirect permanent / https://192.168.0.1/
</VirtualHost>
<VirtualHost *:443>
ServerName dominio.com.br
SSLCertificateFile /etc/httpd/conf/dominio.com.br.pem
SSLCertificateKeyFile /etc/httpd/conf/dominio.com.br.key
SSLEngine on
ServerSignature On
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
</VirtualHost>
- Retire o comentário da linha
#LoadModule ssl_module modules/mod_ssl.so
- Ficando assim
LoadModule ssl_module modules/mod_ssl.so
3. Reinicie o servidor httpd
# systemctl restart httpd
- Agora só acessar no seu browser
192.168.0.1
- ou
localhost
- que já será redirecionado para a pagina https.
Corrigindo erros:
Instalando Apache, MariaDB e PHP com HTTPS no Arch Linux( Rodrigo Leutz )
Sistema: Linux arch 4.17.3-1-ARCH
Dominio: dominio.com.br
Ip: 192.168.0.1
Apache
1. Update do sistema
# pacman –Syu
2. Instalando Apache
# pacman –S apache
- Habilitando e iniciando servidor apache
# systemctl enable httpd
# systemctl restart httpd
- Verificando status do apache
# systemctl status httpd
- Saída devera ser algo assim:
? httpd.service - Apache Web Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2018-07-06 11:58:01 -03; 7s ago
Main PID: 6367 (httpd)
Tasks: 82 (limit: 4915)
Memory: 7.4M
CGroup: /system.slice/httpd.service
+-6367 /usr/bin/httpd -k start -DFOREGROUND
+-6368 /usr/bin/httpd -k start -DFOREGROUND
+-6369 /usr/bin/httpd -k start -DFOREGROUND
+-6370 /usr/bin/httpd -k start -DFOREGROUND
3. Testando apache
- Edite o arquivo http.conf
# nano /srv/http/index.html
- Insira as seguintes linhas
<html>
<title>Apache server</title>
<body>
<h2>Teste deu certo</h2>
</body>
</html>
- Agora acesse a página http://localhost ou http://192.168.0.1
MariaDB
1. Instalando MariaDB
# pacman -S mysql
- Saída devera ser algo assim:
:: There are 2 providers available for mysql:
:: Repository extra
1) mariadb
:: Repository community
2) percona-server
Enter a number (default=1): << [ Enter ]
resolving dependencies...
looking for conflicting packages...
Packages (4) jemalloc-1:5.1.0-1 libmariadbclient-10.1.34-1 mariadb-clients-10.1.34-1
mariadb-10.1.34-1
Total Download Size: 32.49 MiB
Total Installed Size: 229.92 MiB
:: Proceed with installation? [Y/n] << [ Y ]
2. Agora vamos inicializar a base de dados do MariaDB, necessário antes de iniciar o serviço
# mysql_install_db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
3. Agora habilite e inicialize o serviço
# systemctl enable mysqld
# systemctl start mysqld
- Verificando o serviço do MariaDB
# systemctl status mysqld
- Saída deverá ser algo assim:
? mariadb.service - MariaDB 10.1.34 database server
Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled; vendor preset: disabled)
Active: active (running) since Fri 2018-07-06 12:02:33 -03; 5s ago
Docs: man:mysqld(8)
https://mariadb.com/kb/en/library/systemd/
Process: 6750 ExecStartPost=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited>
Process: 6669 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= || VAR=`/usr/bin/ga>
Process: 6668 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited,>
Main PID: 6722 (mysqld)
Status: "Taking your SQL requests now..."
Tasks: 27 (limit: 4915)
Memory: 63.2M
CGroup: /system.slice/mariadb.service
+-6722 /usr/bin/mysqld
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Highest supported>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: 128 rollback segm>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Waiting for purge>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] InnoDB: Percona XtraDB (>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Plugin 'FEEDBACK' is disa>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084282128128 [Note] InnoDB: Dumping buffer po>
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] Server socket created on >
Jul 06 12:02:33 arch mysqld[6722]: 2018-07-06 12:02:33 140084921851840 [Note] /usr/bin/mysqld: ready fo>
Jul 06 12:02:33 arch mysqld[6722]: Version: '10.1.34-MariaDB' socket: '/run/mysqld/mysqld.sock' port:>
Jul 06 12:02:33 arch systemd[1]: Started MariaDB 10.1.34 database server.
4. Colocando password para o root
# mysql_secure_installation
- Saída deverá ser algo assim:
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none): << [ Enter ]
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
Set root password? [Y/n] << [ Enter ]
New password: << [ Entre com o password ]
Re-enter new password: << [ Digite novamente o password ]
Password updated successfully!
Reloading privilege tables..
... Success!
By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them. This is intended only for testing, and to make the installation
go a bit smoother. You should remove them before moving into a
production environment.
Remove anonymous users? [Y/n] << [ Enter ]
... Success!
Normally, root should only be allowed to connect from 'localhost'. This
ensures that someone cannot guess at the root password from the network.
Disallow root login remotely? [Y/n] << [ Enter ]
... Success!
By default, MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, and should be removed
before moving into a production environment.
Remove test database and access to it? [Y/n] << [ Enter ]
- Dropping test database...
... Success!
- Removing privileges on test database...
... Success!
Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.
Reload privilege tables now? [Y/n] << [ Enter ]
... Success!
Cleaning up...
All done! If you've completed all of the above steps, your MariaDB
installation should now be secure.
Thanks for using MariaDB!
MariaDB está instalada e pronta para o uso
PHP
1. Instalando o PHP
# pacman -S php php-apache
- Após a instalação edite o arquivo de configuração do apache
# nano /etc/httpd/conf/httpd.conf
- Encontre a seguite linha e comente
LoadModule mpm_event_module modules/mod_mpm_event.so
- Ficando:
#LoadModule mpm_event_module modules/mod_mpm_event.so
-E adicione as seguintes linhas ao final do arquivo
LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
LoadModule php7_module modules/libphp7.so
AddHandler php7-script php
Include conf/extra/php7_module.conf
2. Testando PHP
# nano /srv/http/test.php
- Adicione as seguintes linhas:
<?php
phpinfo();
?>
- Salve e saia
- Reinicie o apache
# systemctl restart httpd
3. Abra a página http://localhost/test.php ou http://192.168.0.1/test.php
- Deverá abrir as informações do PHP
HTTPS
1. Vamos criar as chaves
# cd /etc/httpd/conf
- Edite o arquivo httpd.conf
# nano httpd.conf
-Adicione as seguintes linhas ao final do arquivo para o apache escutar na porta 443
<IfModule mod_ssl.c>
Listen 443
</IfModule>
- Vamos criar as chaves ssl para o https
# openssl genrsa -out dominio.com.br.key 1024
# openssl req -new -key dominio.com.br.key -x509 -out dominio.com.br.crt -days 999
- Saída devera ser algo assim:
Generating a 2048 bit RSA private key
.................................................+++
..................+++
writing new private key to 'dominio.com.br.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]: << [ Pais ]
State or Province Name (full name) [Some-State]: << [ Estado ]
Locality Name (eg, city) []: << [ Cidade ]
Organization Name (eg, company) [Internet Widgits Pty Ltd]: << [ nome da empresa ]
Organizational Unit Name (eg, section) []: << [ Partição da empresa ]
Common Name (e.g. server FQDN or YOUR name) []: << [ Seu nome ]
Email Address []: << [ E-mail ]
# cat dominio.com.br.key dominio.com.br.crt > dominio.com.br.pem
# chmod 600 ultimatewebdesign*
2. Agora vamos ajustar o httpd.conf
# nano /etc/httpd/conf/httpd.conf
- Após a linha - Listen 80 – Adicione as seguintes linhas ficando desta maneira
Listen 80
<VirtualHost *:80>
ServerName dominio.com.br
# Linha abaixo força a entrada da 80 para a 443 forçando a https
Redirect permanent / https://192.168.0.1/
</VirtualHost>
<VirtualHost *:443>
ServerName dominio.com.br
SSLCertificateFile /etc/httpd/conf/dominio.com.br.pem
SSLCertificateKeyFile /etc/httpd/conf/dominio.com.br.key
SSLEngine on
ServerSignature On
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory /usr/lib/cgi-bin>
SSLOptions +StdEnvVars
</Directory>
</VirtualHost>
- Retire o comentário da linha
#LoadModule ssl_module modules/mod_ssl.so
- Ficando assim
LoadModule ssl_module modules/mod_ssl.so
3. Reinicie o servidor httpd
# systemctl restart httpd
- Agora só acessar no seu browser
192.168.0.1
- ou
localhost
- que já será redirecionado para a pagina https.
[2] Comentário enviado por zugzuang em 22/06/2023 - 10:27h
Obrigado pelo tutorial. O arch linux tem uma instalação um tanto excêntrica do apache, o que praticamente impossibilita seguir tutoriais feitos para outras distribuições. As coisas mudaram desde de a data deste tutorial. Você poderia atualizar a parte do PHP, pois os arquivos do PHP8 parecem não ter os mesmos nomes e caminhos do PHP7, isso acaba impossibilitando seguir 100% o tutorial.
Obrigado pelo tutorial. O arch linux tem uma instalação um tanto excêntrica do apache, o que praticamente impossibilita seguir tutoriais feitos para outras distribuições. As coisas mudaram desde de a data deste tutorial. Você poderia atualizar a parte do PHP, pois os arquivos do PHP8 parecem não ter os mesmos nomes e caminhos do PHP7, isso acaba impossibilitando seguir 100% o tutorial.
Patrocínio
Site hospedado pelo provedor RedeHost.
Destaques
Artigos
Passkeys: A Evolução da Autenticação Digital
Instalação de distro Linux em computadores, netbooks, etc, em rede com o Clonezilla
Título: Descobrindo o IP externo da VPN no Linux
Armazenando a senha de sua carteira Bitcoin de forma segura no Linux
Enviar mensagem ao usuário trabalhando com as opções do php.ini
Dicas
Instalando Brave Browser no Linux Mint 22
vídeo pra quem quer saber como funciona Proteção de Memória:
Encontre seus arquivos facilmente com o Drill
Mouse Logitech MX Ergo Advanced Wireless Trackball no Linux
Compartilhamento de Rede com samba em modo Público/Anônimo de forma simples, rápido e fácil
Tópicos
Programa duplicado no "Abrir com" e na barra de pesquisa do ... (1)
VMs e Interfaces de Rede desapareceram (13)
Como abrir o pycharm no linux [RESOLVIDO] (4)
Top 10 do mês
-
Xerxes
1° lugar - 75.066 pts -
Fábio Berbert de Paula
2° lugar - 54.777 pts -
Mauricio Ferrari
3° lugar - 16.921 pts -
Andre (pinduvoz)
4° lugar - 15.778 pts -
Alberto Federman Neto.
5° lugar - 15.505 pts -
Daniel Lara Souza
6° lugar - 15.154 pts -
Diego Mendes Rodrigues
7° lugar - 14.972 pts -
Buckminster
8° lugar - 13.643 pts -
edps
9° lugar - 12.523 pts -
Alessandro de Oliveira Faria (A.K.A. CABELO)
10° lugar - 11.918 pts
Scripts
A maior comunidade GNU/Linux da América Latina! Artigos, dicas, tutoriais, fórum, scripts e muito mais. Ideal para quem busca auto-ajuda.
Site hospedado por:
