全文検索:
- 32 CentOS5でTLS1.2 Apache PHP
- ・conf用意 ==== <code> # cp build/rpm/httpd.init /etc/init.d/httpd-2.2.24 # diff build/rpm/httpd.init /etc/init.d/httpd-2.2.24 60,62c60,62 < httpd=${HTTPD-... /var/lock/subsys/httpd-2.2.24} 67c67 < CONFFILE=/etc/httpd/conf/httpd.conf --- > CONFFILE=/opt/httpd/... /opt/httpd/httpd-2.2.24/conf/httpd.conf.org # cp /etc/httpd/conf/httpd.conf /opt/httpd/httpd-2.2.24/co
- Apache バーチャルホスト一覧確認
- rvers: _default_:443 dns.flat8.co.jp (/etc/httpd/conf.d/ssl.conf:81) *:80 ... alHost default server mail.flat8.co.jp (/etc/httpd/conf/httpd.conf:1028) port 80 namevhost mail.flat8.co.jp (/etc/httpd/conf/httpd.conf:1028) port 80 namevhost rikoji.flateight.com (/etc/httpd/conf/httpd.conf:1037) port 80 name
- 14 Let's Encrypt無料のSSL証明書
- # メールアドレス登録(証明書期限切れの通知用) </code> <code> # ll /etc/letsencrypt/live/jp010.public.develop.kumolabo.com/* lrwxrwxrwx 1 root root 57 11月 11 17:02 2016 /etc/letsencrypt/live/hogehoge.fl8.jp/cert.pem -> ../.... .pem lrwxrwxrwx 1 root root 58 11月 11 17:02 2016 /etc/letsencrypt/live/hogehoge.fl8.jp/chain.pem -> ../... .pem lrwxrwxrwx 1 root root 62 11月 11 17:02 2016 /etc/letsencrypt/live/hogehoge.fl8.jp/fullchain.pem ->
- 83 PHP複数バージョンを共存
- ww:84_php_accelerator|opcache,apcuについて]] ===== 3./etc/suphp.conf ===== handlersをphp56,php71分の用意 <code|/etc/suphp.conf> [handlers] ;Handler for php-scripts x... ,php71分と suPHP_AddHandler をphp56,php71分用意 <code|/etc/httpd/conf.d/suphp.conf> LoadModule suphp_module ... AddHandler x-httpd-php71 .php suPHP_ConfigPath /etc suPHP_AddHandler x-httpd-php suPHP_AddHandler x-h
- 02 Apache2で自己認証ssl
- nstall mod_ssl ===== サーバ秘密鍵・証明書の作成 ===== # cd /etc/pki/tls/certs/ # sed -i 's/365/3650/g' Makefile... 応答ファイルを作る方法 ==== === 応答ファイル作成 === <code> # vi /etc/ssl/certs/pass_phrase.sh #!/bin/sh echo "your pa... rase" </code> === 権限変更 === <code> # chmod 500 /etc/ssl/certs/pass_phrase.sh </code> === 設定ファイルに追加 === <code> # vi /etc/httpd/conf.d/ssl.conf SSLPassPhraseDialog exec:/
- 31 CentOS5 でTLS1.2
- r/bin/openssl # echo '/opt/openssl-1.0.2r/lib' > /etc/ld.so.conf.d/openssl.conf </code> === ライブラリ読み込み ... tificate http://curl.haxx.se/ca/cacert.pem # mv /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/certs/ca-bundle.crt.org # mv cacert.pem /etc/pki/tls/certs/ca-bundle.crt # echo 'ca-certifica
- 82 CentOS 5.8 + Apache 2.2 + PHP 5.3 + suPHP 0.7.1
- fig # make # make install </code> === /usr/local/etc/suphp.conf === <code> [global] logfile=/var/log/... -scripts x-suphp-cgi=execute:!self </code> === /etc/httpd/conf.d/suphp.conf === <code> # This is the ... e its compiled in default path. suPHP_ConfigPath /etc # If you compiled suphp with setid-mode "force" ... <mime-type> </code> ===== Apache側修正 ===== === /etc/httpd/conf/httpd.conf === <code> <VirtualHost *:
- mod_suphp
- code> ===== 設定ファイル修正 ===== <code console> # vi /etc/suphp.conf umask=0077 ↓ アップロードされたファイルなど、6... ↓ x-httpd-php="php:/usr/bin/php-cgi" # vi /etc/httpd/conf.d/suphp.conf suPHP_Engine off ... cpp:511: Unknown Interpreter: php </code> ◆対応\\ /etc/suphp.confのx-http-phpの所をダブルクォートで囲んでやると動作するらしい。 <code> # vi /etc/suphp.conf ;x-httpd-php=php:/usr/bin/php-cgi
- 15 CentOS6 suPHP7.2
- stall ./configure \ --prefix=/usr \ --sysconfdir=/etc \ --with-apr=/usr/bin/apr-1-config \ --with-apxs=... gid=100 # make # make install </code> ===== /etc/suphp.conf ===== <code> [global] ;Path to logfil... ripts x-suphp-cgi="execute:!self" </code> ===== /etc/httpd/conf.d/suphp.conf ===== <code> LoadModule s... AddHandler x-httpd-php71 .php suPHP_ConfigPath /etc suPHP_AddHandler x-httpd-php suPHP_AddHandler x-h
- 84 PHP アクセラレータ
- ://qiita.com/suke/items/9a54e2d4be5bd990816a]] |/etc/php.d/40-apcu.ini|CentOS 標準の yum リポジトリから PHP をインストールした場合| |/etc/opt/remi/php71/php.d/40-apcu.ini|Remi リポジトリから PHP... https://weblabo.oscasierra.net/php-opcache/]] |/etc/php.d/10-opcache.ini|CentOS 標準の yum リポジトリから PHP をインストールした場合| |/etc/opt/remi/php71/php.d/10-opcache.ini|Remi リポジトリから
- 16 mod_proxy
- C4+RSA:+HIGH:+MEDIUM:+LOW SSLCertificateFile /etc/letsencrypt/live/proxy.fl8.jp/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/proxy.fl8.jp/privkey.pem SSLCACertificateFile /etc/letsencrypt/live/proxy.fl8.jp/chain.pem SSLProxy
- CentOS5.2でApache2.2インストール
- /usr/local/src/httpd-2.2.14/build/rpm/httpd.init /etc/init.d/httpd # chmod 755 /etc/init.d/httpd </code> -PATHの修正 <code console> # vi /etc/init.d/httpd 54 #apachectl=/usr/sbin/apachec
- mod_geoip 接続元国でWebアクセスを制限
- d_geoip ===== geoipのデータベースを更新するよう設定 ===== vi /etc/cron.monthly/geoip chmod 755 /etc/cron.monthly/geoip /etc/cron.monthly/GeoIP.sh #! /bin/sh TMPDIR=/tmp GEODIR=/usr/local/shar
- 81 php53へアップデート
- rpm # rpm -ivh epel-release-5-4.noarch.rpm # vi /etc/yum.repos.d/epel.repo 6 enabled=1 ↓ 6 enabled=0 ... -ivh ius-release-1.0-11.ius.el5.noarch.rpm # vi /etc/yum.repos.d/epel.repo 6 enabled=1 ↓ 6 enabled=0
- 02 Basic認証 httpd.conf
- ctory "/var/www/phpMyAdmin/"> AuthUserFile /etc/httpd/conf/.htpasswd AuthGroupFile /dev/nul