vi /etc/sysconfig/network-scripts/ifcfg-eth0
NETMASK=255.255.255.0
GATWAY=192.168.100.1
DNS1=192.168.100.100
IPADDR=192.168.100.100
:wq
service network restart
mount /dev/cdrom /mnt
yum install bind bind-utils -y
vim /etc/named.conf
listen-on port 53 { any; };
allow-query {any;};
:wq
vim /etc/named.rfc1912.zones
zone "100.168.192.in-addr.arpa" IN {
type master;
file "fx";
allow-update {none; };
};
zone "abc.com" IN {
type master;
file "zx";
allow-update {none; };
};
:wq
cd /var/named
cp -p named.localhost zx
cp -p named.loopback fx
vim zx
@ IN abc.com.
www A 192.168.100.100
:wq
vim fx
@ IN abc.com.
100 PTR www.abc.com.
:wq
service network restart
yum install http mod_ssl -y
vim /etc/pki/tls/openssl.cnf
cd /etc/pki/CA
openssl genrsa -out ca.key 1024
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
openssl genrsa -out server.key 1024
openssl req -new -out server.csr -key server.key
touch index.txt
echo 01 > serial
openssl ca -in server.csr -out server.crt -cert ca.crt -keyfile ca.key
openssl genrsa -out client.key 1024
openssl req -new -out client.csr -key client.key
openssl x509 -req -days 365 -CA ca.crt -CAkey ca.key -CAcreatesrial -in client.csr -out client.crt
openssl pkcs12 -export -clcerts -in client.crt -inkey client.key -out client.p12
vim /etc/httpd/conf.d/ssl.conf
SSLCertificateFile /etc/pki/CA/server.crt
SSLCertficateKeyFile /etc/pki/CA/server.key
SSLCACertficateFile /etc/pki/CA/ca.crt
<Virtualhost *:443>
Documentroot /www
Servername www.abc.com:443
<Directory "/www">
AllowOverride none
Authtype basic
Authname test
AuthUserfile /htpasswd
Require valid-user
</directory>
</virtualhost>
:wq
cd /
mkdir www
echo "welcome to SSL web!" >> /www/index.html
htpasswd -c /htpasswd webuser1
yum install lynx -y
lynx https://www.abc.com
welcome to SSL web!