两种方法实现Apache服务器网站加密访问

两种方法实现Apache服务器网站加密访问

在有些场景下需要对服务器网站及个人主页进行加密设置，只有提供账号和米才能访问。

环境用的是OpenEuler 22.03

IP address: 192.168.145.135
Users online: 2
[root@lanmp ~]# cat /etc/os-release
NAME="openEuler"
VERSION="22.03 (LTS-SP4)"
ID="openEuler"
VERSION_ID="22.03"
PRETTY_NAME="openEuler 22.03 (LTS-SP4)"
ANSI_COLOR="0;31"
[root@lanmp ~]# uname -r
5.10.0-216.0.0.115.oe2203sp4.x86_64

方法一:

1、安装Apache并启动

[root@lanmp etc]# rpm -qa|grep httpd

[root@lanmp etc]# dnf install -y httpd

[root@lanmp etc]# systemctl start httpd.service

[root@lanmp etc]# systemctl status httpd.service

[root@lanmp etc]# httpd -V

Server version: Apache/2.4.51 (Unix)

Server built: Oct 22 2024 19:44:53

2、修改Apache主配置文件httpd.conf

调整根目录权限及站点目录权限如下内容所示

[root@lanmp conf]# vim httpd.conf
104 <Directory />
105 AllowOverride all
106 #AllowOverride none
107 #Require all denied
108 Require all granted
109 </Directory>
155 #AllowOverride None
156 AllowOverride all

然后到站点目录下创建隐藏的配置文件.htaccess

[root@lanmp html]# pwd
/var/www/html
[root@lanmp html]# cat .htaccess
authname "welcome"
authtype basic
authuserfile /usr/local/u.psd
require valid-user

3、重启Apache 并创建访问站点用户名及密码

[root@lanmp html]# systemctl restart httpd.service
[root@lanmp html]# htpasswd -cb /usr/local/u.psd oxoo oxo123456
Adding password for user oxoo
[root@lanmp html]# cat /usr/local/u.psd
oxoo:$apr1$dL0C0.6M$jkkA/PDLICl2fAm7Lxf/a0

4、防火墙开放80端口或者关闭防火墙及selinux,浏览器测试如图示

方法二:

我们先关闭Apache 并还原主配置文件

[root@lanmp html]# systemctl stop httpd.service
[root@lanmp html]# ps -ef|grep httpd
root 6585 5809 0 02:20 pts/0 00:00:00 grep --color=auto httpd
[root@lanmp html]#
<Directory />
#AllowOverride all
AllowOverride none
Require all denied
#Require all granted
</Directory>
# Options FileInfo AuthConfig Limit
#
AllowOverride None
#AllowOverride all

1、自定义站点目录为 /data/web,并添加首页文件

[root@lanmp conf.d]# mkdir /data/web-pv
mkdir: cannot create directory ‘/data/web-pv’: No such file or directory
[root@lanmp conf.d]# mkdir /data/web -pv
mkdir: created directory '/data'
mkdir: created directory '/data/web'
[root@lanmp conf.d]# echo 'hello,apache web' >/data/web/index.html
[root@lanmp conf.d]#

把 主配置httpd.conf的 站点目录注释掉

#

#DocumentRoot "/var/www/html"

2、切换到扩展目录，并添加站点目录权限文件

[root@lanmp conf.d]# cat web.conf
DocumentRoot "/data/web"
<Directory "/data/web">
AllowOverride None
Require all granted
</Directory>

重启Apache 浏览器测试应该能正常访问的，如图所示。

3、创建站点访问的普通用户

[root@lanmp conf.d]# useradd web
[root@lanmp conf.d]# echo 'OpenEuler123'|passwd --stdin web
Changing password for user web.
passwd: all authentication tokens updated successfully.
[root@lanmp conf.d]# chmod 755 /home/web/
[root@lanmp conf.d]# ls -ld /home/web/
drwxr-xr-x 2 web web 4096 Oct 10 02:44 /home/web/

切换到普通web用户并创建站点目录

[web@lanmp ~]$ mkdir public_html
[web@lanmp ~]$ ll
total 4
drwxr-xr-x 2 web web 4096 Oct 10 02:47 public_html
[web@lanmp ~]$ echo 'hello ,OpenEuler' >public_html/index.html
[web@lanmp ~]$ logout

配置网页访问密码

[root@lanmp conf.d]# htpasswd -cb /etc/httpd/.passwd web 123456
Adding password for user web

4、进入/etc/httpd/conf.d目录，编辑userdir.conf，开启用户个人主页功能

[root@lanmp conf.d]# vim userdir.conf
#
#UserDir disabled
。。。
UserDir public_html
</IfModule>
。。。
<Directory "/home/*/public_html">
AllowOverride all
authuserfile "/etc/httpd/.passwd"
authname "我的个人主页"
authtype basic
Require user web
</Directory>

然后重启Apache，浏览器测试，如图示。

http://192.168.145.135/~web

你学废了吗