Httpd-2.4实现2个虚拟主机：要求如下
a.
1.提供两个基于名称的虚拟主机www1,www2;有单独的错误日志和访问日志；
1.通过www1的/server-status提供httpd状态信息，且仅允许tom用户访问；
2.www2不允许192.168.0.0/24网段的任意主机访问；
b.为上面的第2个虚拟主机提供https服务。
实现步骤：
1.创建两个虚拟主机www1，www2的配置文件/etc/httpd/conf.d/vhostwww1.conf,/etc/httpd/conf.d/vhostwww2.conf,根目录/var/www/html/www1,/var/www/html/www2及首页文件indexwww1.html,indexwww2.html
[root@www ~]# mkdir /var/www/html/www{1,2}
[root@www ~]# echo www1 > /var/www/html/www1/indexwww1.html
[root@www ~]# echo www2 > /var/www/html/www1/indexwww2.html
虚拟主机www1的配置文件内容：
[root@localhost ~]# cat /etc/httpd/conf.d/vhostwww1.conf
<VirtualHost 172.16.254.79:80>
ServerName www1
DocumentRoot /var/www/html/www1
ErrorLog logs/www1_error_log
CustomLog logs/www1_access_log combined
<Location /server-status>
SetHandler server-status
AuthType Basic
AuthName "httpd-2.4 status page"
AuthUserFile /etc/httpd/user/.htpasswd
Require user tom
</Location>
<Directory /var/www/html/wwww1>
Options None
AllowOverride None
Require all granted
</Directory>
</VirtualHost>
创建虚拟用户tom
mkdir /etc/httpd/user
htpasswd -m -c /etc/httpd/user/.htpasswd tom-----输入两个密码即可
虚拟主机www2的配置文件内容：
[root@localhost ~]# cat /etc/httpd/conf.d/vhostwww2.conf
<VirtualHost 172.16.254.79:80>
ServerName www2
DocumentRoot /var/www/html/www2
ErrorLog logs/www2_error_log
CustomLog logs/www2_access_log combined
<Directory /var/www/html/www2>
Options None
AllowOverride None
<RequireAll>
Require not ip 192.168.0.0/24
Require all granted
</RequireAll>
</Directory>
</VirtualHost>
虚拟主机www2的https的实现：
Yum -y install mod_ssl
搭建私有CA 实验环境：一台centos7.2的主机即当CA，又是www2虚拟站点
CA服务端配置：
[root@localhost ~]# cd /etc/pki/CA
[root@localhost CA]# touch index.txt
[root@localhost CA]# echo 01 > serial
创建私钥：
[root@localhost CA]# (umask 066;openssl genrsa -out private/cakey.pem 1024)
创建自签证书：
[root@localhost CA]# openssl req -new -x509 -key private/cakey.pem -days 3650 -out cacert.pem
www2虚拟站点生成私钥：
[root@localhost CA]# (umask 066;openssl genrsa -out /etc/httpd/ssl/httpd.key 1024)
生成证书申请文件：
[root@localhost CA]# openssl req -new -key /etc/httpd/ssl/httpd.key -days 365 -out /etc/httpd/ssl/httpd.csr
CA服务器给www2颁发证书：
[root@localhos CA]# openssl ca -in /etc/httpd/ssl/httpd.csr -out /etc/pki/CA/newcerts/httpd.crt -days 365
[root@localhost CA]# cp /etc/pki/CA/newcerts/httpd.crt /etc/httpd/ssl/
配置mod_ssl提供给httpd2.4的配置文件：
Vim /etc/httpd/conf.d/ssl.conf
LoadModule ssl_module modules/mod_ssl.so
Listen 443
<VirtualHost 172.16.254.79:443>
DocumentRoot "/var/www/html/www2"
ServerName www2:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLCertificateKeyFile /etc/httpd/ssl/httpd.key
SSLCertificateFile /etc/httpd/ssl/httpd.crt
</VirtualHost>
Service httpd reload ---- 重载服务
www2 证书测试：
Vim /etc/hosts
172.16.251.237 www1 www2
1. Openssl s_client -connect www2:443 -CAfile /etc/pki/CA/cacert.crt
2. 把CA的证书，导入到浏览器中，然后访问
https://www2/indexwww2.html
