]]>apache銆乼omcat錛宻sl,鐨勬暣鍚堬紝鍔犲叆闆嗙兢鐨勫姛鑳?/title>http://www.tkk7.com/aspirin/archive/2006/03/30/38190.htmlaspirinaspirinThu, 30 Mar 2006 01:31:00 GMThttp://www.tkk7.com/aspirin/archive/2006/03/30/38190.htmlhttp://www.tkk7.com/aspirin/comments/38190.htmlhttp://www.tkk7.com/aspirin/archive/2006/03/30/38190.html#Feedback3http://www.tkk7.com/aspirin/comments/commentRss/38190.htmlhttp://www.tkk7.com/aspirin/services/trackbacks/38190.html
鐩爣錛歛pache銆乼omcat錛宻sl,鐨勬暣鍚堬紝鍔犲叆闆嗙兢鐨勫姛鑳?br />
鎿嶄綔緋葷粺錛欶C4-i386,redhat as 4
鎵闇杞歡錛歨ttpd-2.2.0,jakarta-tomcat-5.0.30,jdk1.4鎴栬卝dk1.5,openssl-0.9.8,ssl.ca-0.1.tar.gz
瀹夎openssl
聽 $ tar zxf聽聽 openssl-0.9.8.tar.gz
聽 $ cd openssl-0.98
聽 $ ./config --prefix=/usr/local/ssl
聽 $ make
聽 $ make test
聽 $ make install
瀹夎httpd,騫舵敮鎸乻sl
# tar zxf httpd-2.2.0.tar.gz
# cd httpd-2.2.0
apr鍜宎pr-util鐨勫畨瑁?br />
瀹夎apr
# cd srclib/apr
# ./configure --prefix=/usr/local/apr
# make
# make install
瀹夎apr-util
# cd ../apr-util/
# ./configure --prefix=/usr/local/apr-util \
聽聽聽 --with-apr=/usr/local/apr
# make
# make install
# cd ../../
瀹夎apache
# ./configure --prefix=/usr/local/apache \
聽聽聽 --enable-so \
--enable-proxy-balancer \
聽聽聽 --enable-rewrite=share \
聽聽聽 --enable-proxy=share \
聽聽聽 --enable-proxy-ajp=share \
聽聽聽 --enable-dav=share \
聽聽聽 --with-apr=/usr/local/apr \
聽聽聽 --with-apr-util=/usr/local/apr-util/聽 \
聽聽聽 --enable-ssl=static \
聽聽聽 --with-ssl=/usr/local/ssl
聽聽聽 --enable-mods-shared=all
# make
# make install
瀹夎ssl涓存椂璇佷功錛?br />
ssl.ca-0.1.tar.gz
# cd /usr/local/apache2/conf
# tar zxvf ssl.ca-0.1.tar.gz
# cd ssl.ca-0.1
# ./new-root-ca.sh聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽 聽
No Root CA key round. Generating one
Generating RSA private key, 1024 bit long modulus
...........................++++++
....++++++
e is 65537 (0x10001)
Enter pass phrase for ca.key:聽聽聽聽聽聽聽聽聽聽聽 聽
Verifying - Enter pass phrase for ca.key: 聽
......
Self-sign the root CA...聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽 聽
Enter pass phrase for ca.key:聽聽聽聽聽 聽
........
........聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽聽
聽
Country Name (2 letter code) [MY]:CN
State or Province Name (full name) [Perak]:ZheJiang
Locality Name (eg, city) [Sitiawan]:HangZhou
Organization Name (eg, company) [My Directory Sdn Bhd]:sc
Organizational Unit Name (eg, section) [Certification Services Division]:sc
Common Name (eg, MD Root CA) []:2
Email Address []:admin@admin.com
榪欐牱灝辯敓鎴愪簡ca.key鍜宑a.crt涓や釜鏂囦歡錛屾帴涓嬫潵鐢熸垚涓涓瘉涔︼細
# ./new-server-cert.sh server聽聽聽聽 聽
......
......
Country Name (2 letter code) [MY]:CN
State or Province Name (full name) [Perak]:ZheJiang
Locality Name (eg, city) [Sitiawan]:HangZhou
Organization Name (eg, company) [My Directory Sdn Bhd]:sc
Organizational Unit Name (eg, section) [Secure Web Server]:sc
Common Name (eg, www.domain.com) []:2
Email Address []:admin@admin.com
榪欐牱灝辯敓鎴愪簡server.csr鍜宻erver.key榪欎袱涓枃浠躲?br />
榪橀渶瑕佺緗蹭竴涓嬫墠鑳戒嬌鐢ㄧ殑錛?br />
# ./sign-server-cert.sh server
CA signing: server.csr -> server.crt:
Using configuration from ca.config
Enter pass phrase for ./ca.key:聽聽聽聽聽聽聽 聽
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName聽聽聽聽聽聽聽聽聽聽 :PRINTABLE:'CN'
stateOrProvinceName聽聽 :PRINTABLE:'JiangSu'
localityName聽聽聽聽聽聽聽聽聽 :PRINTABLE:'NanJing'
organizationName聽聽聽聽聽 :PRINTABLE:'Wiscom System Co.,Ltd'
organizationalUnitName:PRINTABLE:'ACSTAR'
commonName聽聽聽聽聽聽聽聽聽聽聽 :PRINTABLE:'acmail.wiscom.com.cn'
emailAddress聽聽聽聽聽聽聽聽聽 :IA5STRING:'acmail@wiscom.com.cn'
Certificate is to be certified until Jul 16 12:55:34 2005 GMT (365 days)
Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated
CA verifying: server.crt <-> CA cert
server.crt: OK