나만의 세상~!

httpd-2.2.3, php-5.2.0 + ssl 의 설치내용입니다.

ssl설치하다 아파치의 conf파일설정이 2.2.0부터는 변경되 삽질을 좀 했습니다.

그래서 변경된 설정내용을 적었습니다.

httpd.conf 가 여러개로 나누어졌다는 것이 주내용입니다.

conf/extra 아래 여러 conf 파일이 있습니다.



기본적인 설치내용이며 ssl은 rpm으로 기본설치된 상태에서 했습니다.

php 컴파일시 xml관련 필요한 프로그램을 요구하는데,

설치하거나 옵션을 disable 해야합니다.





------------------------------------------------------------------------------------

위치 : /usr/local/src/httpd-2.2.3



./configure --prefix=/usr/local/apache2 --enable-so --enable-ssl --with-ssl=/usr

make

make install





위치 : /usr/local/src/php-5.2.0



./configure --prefix=/usr/local/php5 --with-mysql --with-apxs2=/usr/local/apache2/bin/apxs

make

make install



cp php.ini-dist /usr/local/php5/lib/php.ini







위치 : /usr/local/apache2/



vim conf/httpd.conf

    DocumentRoot "/www/htdocs"

    ServerAdmin ADMIN@DOMAIN.COM



    # <Directory "/">

    # Order deny,allow

    # Deny from all

    # </Directory>

    # 이런설정이 디폴트여서 사용하는 디렉토리의 Allow를 해주지 않으면

    # 웹에서 접근시 403에러가 난다.

    # 웹에서 사용되는 가상호스트의 디렉토리에 대해 Allow from all 한다.

    <Directory "/www/htdocs">

    Options Indexes FollowSymLinks

    AllowOverride None

    Order allow,deny

    Allow from all

    </Directory>



    <Directory "/www/htdocs2">

    Options Indexes FollowSymLinks

    AllowOverride None

    Order allow,deny

    Allow from all

    </Directory>



    AddType application/x-httpd-php .php



    # 가상호스트사용을 위해서는 주석을 제거

    Include conf/extra/httpd-vhosts.conf



    # ssl사용을 위해서는 주석을 제거

    Include conf/extra/httpd-ssl.conf







vim conf/extra/httpd-vhosts.conf

    # 가상호스트설정 내용이 파일에 들어 있으니 수정해야 한다.







vim conf/extra/httpd-ssl.conf

    # DocumentRoot, ServerName, SSLCertificateFile, SSLCertificateKeyFile

    # 이와 관련된 내용만 수정하면 됨

    # 인증관련파일은 인증서 구입한 곳에서 인증서생성 메뉴얼을 주더군요.

    # 구입한 인증서 crt, key 파일 위치로 변경



    DocumentRoot "/www/htdocs"

    ServerAdmin ADMIN@DOMAIN.COM

    SSLCertificateFile /usr/local/apache2/conf/server.crt

    SSLCertificateKeyFile /usr/local/apache2/conf/server.key









실행

/usr/local/apache2/bin/apachectl start

   # startssl 이 더이상 되지 않는다. 그냥 start이다.



https://WWW.DOMAIN.COM 에 들어가서 확인.















httpd.conf, httpd-vhosts.conf, httpd-ssl.conf 파일내용.





httpd.conf

----------------------------------------------------

ServerRoot "/usr/local/apache2"

Listen 80

LoadModule php5_module        modules/libphp5.so

<IfModule !mpm_netware_module>

User nobody

Group nobody

</IfModule>

ServerAdmin ADMIN@DOMAIN.COM

DocumentRoot "/www/htdocs"

<Directory />

    Options FollowSymLinks

    AllowOverride None

    Order deny,allow

    Deny from all

</Directory>

<Directory "/www/htdocs">

    Options Indexes FollowSymLinks

    AllowOverride None

    Order allow,deny

    Allow from all

</Directory>

<Directory "/www/htdocs2">

    Options Indexes FollowSymLinks

    AllowOverride None

    Order allow,deny

    Allow from all

</Directory>

<IfModule dir_module>

    DirectoryIndex index.php index.html

</IfModule>

<FilesMatch "^\.ht">

    Order allow,deny

    Deny from all

    Satisfy All

</FilesMatch>

ErrorLog logs/error_log

LogLevel warn

<IfModule log_config_module>

    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined

    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>

      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio

    </IfModule>

    CustomLog logs/access_log common

</IfModule>

<IfModule alias_module>

    ScriptAlias /cgi-bin/ "/usr/local/apache2/cgi-bin/"

</IfModule>

<IfModule cgid_module>

</IfModule>

<Directory "/usr/local/apache2/cgi-bin">

    AllowOverride None

    Options None

    Order allow,deny

    Allow from all

</Directory>

DefaultType text/plain

<IfModule mime_module>

    TypesConfig conf/mime.types

    AddType application/x-compress .Z

    AddType application/x-gzip .gz .tgz

    AddType application/x-httpd-php .php

</IfModule>

Include conf/extra/httpd-vhosts.conf

Include conf/extra/httpd-ssl.conf

<IfModule ssl_module>

SSLRandomSeed startup builtin

SSLRandomSeed connect builtin

</IfModule>







httpd-vhosts.conf

----------------------------------------------------

NameVirtualHost *:80

<VirtualHost *:80>

    ServerAdmin ADMIN@DOMAIN.COM

    DocumentRoot /www/htdocs

    ServerName WWW.DOMAIN.COM

    ServerAlias DOMAIN.COM

    ErrorLog logs/www_error_log

    CustomLog logs/www_access_log common

</VirtualHost>

<VirtualHost *:80>

    ServerAdmin ADMIN@DOMAIN.COM

    DocumentRoot /www/htdocs2

    ServerName WWW2.DOMAIN.COM

    ErrorLog logs/www2_error_log

    CustomLog logs/www2_access_log common

</VirtualHost>







httpd-ssl.conf

----------------------------------------------------

Listen 443

AddType application/x-x509-ca-cert .crt

AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache        shmcb:/usr/local/apache2/logs/ssl_scache(512000)

SSLSessionCacheTimeout  300

SSLMutex  file:/usr/local/apache2/logs/ssl_mutex

<VirtualHost *:443>

DocumentRoot "/www/htdocs"

ServerName www.DOMAIN.COM:443

ServerAdmin ADMIN@DOMAIN.COM

ErrorLog /usr/local/apache2/logs/error_log

TransferLog /usr/local/apache2/logs/access_log

SSLEngine on

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile /usr/local/apache2/conf/server.crt

SSLCertificateKeyFile /usr/local/apache2/conf/server.key

<FilesMatch "\.(cgi|shtml|phtml|php)$">

    SSLOptions +StdEnvVars

</FilesMatch>

<Directory "/usr/local/apache2/cgi-bin">

    SSLOptions +StdEnvVars

</Directory>

BrowserMatch ".*MSIE.*" \

         nokeepalive ssl-unclean-shutdown \

         downgrade-1.0 force-response-1.0

CustomLog /usr/local/apache2/logs/ssl_request_log \

          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>