Fi ijẹrisi SSL sori ẹrọ fun PhpMyAdmin lori iṣẹ DebianCentOS
Alaafia, aanu ati ibukun Ọlọrun
Kaabọ si alaye tuntun Mekano Tech awọn ọmọlẹyin
Ni ibẹrẹ, fifi sori ijẹrisi SSL jẹ ọkan ninu awọn ohun pataki julọ ni aabo PhpMyAdmin ati aabo iwọle rẹ, ati pe eyi mu aabo olupin rẹ pọ si tabi aabo awọn data data ti awọn aaye rẹ, ati pe eyi ni iduroṣinṣin ati iduroṣinṣin fun iṣẹ rẹ lori Intaneti.
Lati ṣe eyi, fi sori ẹrọ mod_ssl package lori CentOS
# yum fi sori ẹrọ mod_ssl
Lẹhinna a ṣẹda itọsọna kan lati tọju bọtini ati ijẹrisi pẹlu aṣẹ yii
Ṣe akiyesi pe eyi wulo fun Debian
# mkdir /etc/apache2/ssl [Debian/Ubuntu ati awọn pinpin ti o da lori wọn] # mkdir /etc/httpd/ssl [CentOS ati awọn pinpin ti o da lori rẹ]
Ṣẹda bọtini ati ijẹrisi fun Debian / Ubuntu tabi awọn pinpin orisun wọn pẹlu aṣẹ yii
# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key -out /etc/apache2/ssl/apache.crt
Fun CentOS, ṣafikun aṣẹ yii
# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/apache.key -out /etc/httpd/ssl/apache.crt
Iwọ yoo yi ohun ti o wa ni pupa pada si ohun ti o baamu
...................................... ...................... .................................++ kikọ bọtini ikọkọ tuntun si '/etc/httpd/ssl/apache.key' ----- O fẹrẹ beere lọwọ rẹ lati tẹ alaye sii ti yoo dapọ si ibeere ijẹrisi rẹ. Ohun ti o fẹ wọle ni ohun ti a pe ni Orukọ Iyatọ tabi DN kan. Awọn aaye pupọ lo wa ṣugbọn o le fi diẹ silẹ ni ofifo Fun diẹ ninu awọn aaye iye aiyipada yoo wa, ti o ba tẹ '.', aaye naa yoo wa ni ofifo. ----- Orukọ Orilẹ-ede (koodu lẹta 2) [XX]:IN Ipinle tabi Orukọ Agbegbe (orukọ kikun) []:Mohamed Orukọ Agbegbe (fun apẹẹrẹ, ilu) [Ilu Aiyipada]:Cairo Orukọ Ajo (fun apẹẹrẹ, ile-iṣẹ) [Ile-iṣẹ Aiyipada]:Mekano Tech Orukọ Ẹka Eto (fun apẹẹrẹ, apakan) []:Egipti Orukọ ti o wọpọ (fun apẹẹrẹ, orukọ rẹ tabi orukọ olupin olupin rẹ) []:server.mekan0.com Adirẹsi imeeli []:[imeeli ni idaabobo]
Nigbamii a ṣayẹwo bọtini ati ijẹrisi ti a ṣẹda pẹlu awọn aṣẹ wọnyi fun CentOS / Debian
#cd/etc/apache2/ssl/[Debian/Ubuntu ati awọn pinpin ti o da lori wọn] #cd/etc/httpd/ssl/[CentOS ati awọn pinpin ti o da lori rẹ] #ls -l lapapọ 8 -rw-r -r-- . 1 root root 1424 Sep 7 15:19 apache.crt -rw -r -r--. 1 root root 1704 Sep 7 15:19 apache.key
Lẹhin eyi a ṣafikun awọn ila mẹta ni ọna yii
(/etc/apache2/sites-available/000-default.conf) fun Debian
SSLEngine lori SSLCertificateFile /etc/apache2/ssl/apache.crt SSLCertificateKeyFile /etc/apache2/ssl/apache.key
Bi fun pinpin CentOS
Fi awọn ila wọnyi kun ni ọna yii /etc/httpd/conf/httpd.conf
SSLEngine lori SSLCertificateFile /etc/httpd/ssl/apache.crt SSLCertificateKeyFile /etc/httpd/ssl/apache.key
Lẹhinna o fipamọ
Lẹhinna fi aṣẹ yii kun
# a2enmod ssl
Lẹhinna rii daju pe ila yii wa ni awọn ọna meji wọnyi
/etc/phpmyadmin/config.inc.php
/etc/phpMyAdmin/config.inc.php
$cfg ['ForceSSL'] = otitọ;
Lẹhinna a tun bẹrẹ Apache fun awọn pinpin mejeeji
# systemctl tun apache2 bẹrẹ [Debian/Ubuntu ati awọn pinpin ti o da lori wọn] # systemctl tun bẹrẹ httpd [CentOS]
Lẹhin iyẹn, o ṣii ẹrọ aṣawakiri rẹ ki o beere IP ti olupin rẹ ati PhpMyAdmin, fun apẹẹrẹ
https://192.168.1.12/ phpMyAdmin
O yi IP pada si adiresi IP rẹ
Ṣe akiyesi pe ẹrọ aṣawakiri yoo sọ fun ọ pe asopọ ko ni aabo.
Eyi dopin alaye ti fifi ijẹrisi aabo sori ẹrọ fun alabojuto data data, o ṣeun fun abẹwo rẹ
