Linux中国 Linux中国门户站!
设为主页 设为主页
收藏本站 收藏本站
 
当前位置 :首页 ->Linux技术 ->系统管理 ->正文

Apache、SSL、MySQL和PHP平滑无缝地安装

来源:Linux-cn.com 作者:Webmaster 时间:2007-05-05 点击: [收藏] [投稿]

# cd rsaref-2.0 
# cp -rp install/unix local 
# cd local 
# make 
# mv rsaref.a librsaref.a 
# cd ../.. 

  安装OpenSSL。记住,你将用它来创建临时证书和CSR文件。--prefix选项指定主安装目录。


# cd openssl-0.9.x 
# ./config -prefix=/usr/local/ssl  
-L`pwd`/../rsaref-2.0/local/ rsaref -fPIC 

  现在make、测试并安装它。


# make 
# make test 
# make install 
# cd .. 

  我们将配置MOD_SSL模块,然后用Apache配置指定它为一个可装载的模块。


# cd mod_ssl-2.5.x-1.3.x 
# ./configure  
--with-apache=../apache_1.3.x  
# cd .. 

  现在我们可以把更多的Apache模块加到Apache源代码树中。可选的--enable-shared=ssl选项使得mod_ssl构造成为一个DSO“libssl.so”。关于在Apache支持DSO的更多信息,阅读Apache源代码树中的INSTALL和 htdocs/manual/dso.html文档。我强烈建议ISP和软件包装维护者为了最灵活地使用mod_ssl而使用DSO工具,但是注意,DSO不是在所有平台上的Apache都支持。


# cd apache_1.3.x 
# SSL_BASE=../openssl-0.9.x  
RSA_BASE=../rsaref-2.0/local  
./configure  --enable-module=ssl  
--activate-module=src/modules/php4/libphp4.a  
--enable-module=php4 --prefix=/usr/local/apache  
--enable-shared=ssl 
[...你可加入更多的选项...] 

  生成Apache,然后生成证书,并安装...


# make 

  如果你已正确地完成,你将得到类似于以下的信息:


+-----------------------------------------------------------------------+ 
| Before you install the package you now should prepare the SSL         | 
| certificate system by running the 'make certificate' command.         | 
| For different situations the following variants are provided:         | 
|                                                                       | 
| % make certificate TYPE=dummy (dummy self-signed Snake Oil cert)      | 
| % make certificate TYPE=test (test cert signed by Snake Oil CA)       | 
| % make certificate TYPE=custom (custom cert signed by own CA)         | 
| % make certificate TYPE=existing (existing cert)                      | 
| CRT=/path/to/your.crt [KEY=/path/to/your.key]                         | 
|                                                                       |  
| Use TYPE=dummy when you're a vendor package maintainer,               | 
| the TYPE=test when you're an admin but want to do tests only,         | 
| the TYPE=custom when you're an admin willing to run a real server     | 
| and TYPE=existing when you're an admin who upgrades a server.         | 
| (The default is TYPE=test)                                            | 
|                                                                       | 
| Additionally add ALGO=RSA (default) or ALGO=DSA to select             | 
| the signature algorithm used for the generated certificate.           | 
|                                                                       | 
| Use 'make certificate VIEW=1' to display the generated data.          | 
|                                                                       | 
| Thanks for using Apache & mod_ssl. Ralf S. Engelschall                | 
| rse@engelschall.com                                                   | 
| www.engelschall.com                                                   | 
+-----------------------------------------------------------------------+ 

  现在你可以创建一个定制的证书。该选项将提示输入你的地址、公司、和其他一些东西。关于证书,请参阅本文的结尾。

# make certificate TYPE=custom 

  现在安装Apache...

# make install 

  如果一切正常,你应该看到类似于以下的信息:


+-------------------------------------------------------------------+ 
| You now have successfully built and installed the                 | 
| Apache 1.3 HTTP server. To verify that Apache actually            | 
| works correctly you now should first check the                    | 
| (initially created or preserved) configuration files              | 
|                                                                   | 
| /usr/local/apache/conf/httpd.conf                                 | 
| and then you should be able to immediately fire up                | 
| Apache the first time by running:                                 | 
|                                                                   | 
| /usr/local/apache/bin/apachectl start                             | 
| Or when you want to run it with SSL enabled use:                  | 
|                                                                   |  
| /usr/local/apache/bin/apachectl startssl                          | 
| Thanks for using Apache. The Apache Group                         | 
| http://www.apache.org/                                            |  
+-------------------------------------------------------------------+ 


 如果您对本文有任何疑问或者建议,请到讨论区发表您的意见: >> 论坛入口 <<



上一篇:用SSL构建一个安全的Apache   下一篇:在Linux上搭建WEB服务器:基本概念、PHP

文章评论】 【收藏本文】 【推荐好友】 【打印本文】 【我要投稿】 【论坛讨论
更多相关文章
Power by linux-cn.com 粤ICP备05006655号