• centos7 离线安装httpd


    yum install httpd -y安装提示没有可用软件包,
    执行vim /etc/yum.conf,将最后一行注释掉
    #exclude=httpd nginx php mysql mairadb python-psutil python2-psutil

    [root@controller yum.repos.d]# yum install httpd -y
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    没有可用软件包 httpd。
    错误:无须任何处理
    [root@controller yum.repos.d]# vim /etc/yum.conf
    [root@controller yum.repos.d]# vim /etc/yum.conf
    [root@controller yum.repos.d]# vim /etc/yum.conf
    [root@controller yum.repos.d]# yumdownloader httpd
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    base                                                     | 3.6 kB     00:00
    epel                                                     | 4.7 kB     00:00
    extras                                                   | 2.9 kB     00:00
    updates                                                  | 2.9 kB     00:00
    httpd-2.4.6-97.el7.centos.5.x86_64.rpm                     | 2.7 MB   00:04
    [root@controller yum.repos.d]# ls
    CentOS7-Base-163.repo         epel-testing.repo
    epel-release-7-14.noarch.rpm  httpd-2.4.6-97.el7.centos.5.x86_64.rpm
    epel.repo                     repo_bak
    [root@controller yum.repos.d]# yumdownloader mod_ssl
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm                   | 115 kB   00:01
    [root@controller yum.repos.d]# yumdownloader openssl
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    openssl-1.0.2k-25.el7_9.x86_64.rpm                         | 494 kB   00:00
    
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27
    • 28
    • 29
    • 30

    下载然后安装httpd

    [root@controller yum.repos.d]# ll
    总用量 3424
    -rw-r--r-- 1 root root    1572 121 2016 CentOS7-Base-163.repo
    -rw-r--r-- 1 root root   15608 95 2021 epel-release-7-14.noarch.rpm
    -rw-r--r-- 1 root root    1528 92 21:22 epel.repo
    -rw-r--r-- 1 root root    1651 92 21:24 epel-testing.repo
    -rw-r--r-- 1 root root 2847720 325 02:21 httpd-2.4.6-97.el7.centos.5.x86_64.rpm
    -rw-r--r-- 1 root root  118140 325 02:22 mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm
    -rw-r--r-- 1 root root  505916 329 03:53 openssl-1.0.2k-25.el7_9.x86_64.rpm
    drwxr-xr-x 2 root root      70 92 21:27 repo_bak
    [root@controller yum.repos.d]# rpm -ivh httpd-2.4.6-97.el7.centos.5.x86_64.rpm
    错误:依赖检测失败:
            httpd-tools = 2.4.6-97.el7.centos.5 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
            libapr-1.so.0()(64bit) 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
            libaprutil-1.so.0()(64bit) 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
    [root@controller yum.repos.d]# sudo yum install --downloadonly httpd --downloaddir=/download/
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    正在解决依赖关系
    --> 正在检查事务
    ---> 软件包 httpd.x86_64.0.2.4.6-97.el7.centos.5 将被 安装
    --> 正在处理依赖关系 httpd-tools = 2.4.6-97.el7.centos.5,它被软件包 httpd-2.4.6-97.el7.centos.5.x86_64 需要
    --> 正在处理依赖关系 libaprutil-1.so.0()(64bit),它被软件包 httpd-2.4.6-97.el7.centos.5.x86_64 需要
    --> 正在处理依赖关系 libapr-1.so.0()(64bit),它被软件包 httpd-2.4.6-97.el7.centos.5.x86_64 需要
    --> 正在检查事务
    ---> 软件包 apr.x86_64.0.1.4.8-7.el7 将被 安装
    ---> 软件包 apr-util.x86_64.0.1.5.2-6.el7 将被 安装
    ---> 软件包 httpd-tools.x86_64.0.2.4.6-97.el7.centos.5 将被 安装
    --> 解决依赖关系完成
    
    依赖关系解决
    
    ================================================================================
     Package           架构         版本                        源             大小
    ================================================================================
    正在安装:
     httpd             x86_64       2.4.6-97.el7.centos.5       updates       2.7 M
    为依赖而安装:
     apr               x86_64       1.4.8-7.el7                 base          104 k
     apr-util          x86_64       1.5.2-6.el7                 base           92 k
     httpd-tools       x86_64       2.4.6-97.el7.centos.5       updates        94 k
    
    事务概要
    ================================================================================
    安装  1 软件包 (+3 依赖软件包)
    
    总下载量:3.0 M
    安装大小:9.9 M
    Background downloading packages, then exiting:
    (1/4): apr-1.4.8-7.el7.x86_64.rpm                          | 104 kB   00:00
    (2/4): httpd-tools-2.4.6-97.el7.centos.5.x86_64.rpm        |  94 kB   00:00
    (3/4): apr-util-1.5.2-6.el7.x86_64.rpm                     |  92 kB   00:00
    (4/4): httpd-2.4.6-97.el7.centos.5.x86_64.rpm              | 2.7 MB   00:01
    --------------------------------------------------------------------------------
    总计                                               2.8 MB/s | 3.0 MB  00:01
    exiting because "Download Only" specified
    [root@controller yum.repos.d]# cd /download/
    [root@controller download]# ll
    总用量 3076
    -rw-r--r-- 1 root root  106124 1015 2020 apr-1.4.8-7.el7.x86_64.rpm
    -rw-r--r-- 1 root root   94132 74 2014 apr-util-1.5.2-6.el7.x86_64.rpm
    -rw-r--r-- 1 root root 2847720 325 02:21 httpd-2.4.6-97.el7.centos.5.x86_64.rpm
    -rw-r--r-- 1 root root   96468 325 02:21 httpd-tools-2.4.6-97.el7.centos.5.x86_64.rpm
    [root@controller download]# httpd -v
    bash: httpd: 未找到命令...
    [root@controller download]# rpm -ivh httpd-2.4.6-97.el7.centos.5.x86_64.rpm
    错误:依赖检测失败:
            httpd-tools = 2.4.6-97.el7.centos.5 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
            libapr-1.so.0()(64bit) 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
            libaprutil-1.so.0()(64bit) 被 httpd-2.4.6-97.el7.centos.5.x86_64 需要
    [root@controller download]# rpm -ivh *.rpm
    准备中...                          ################################# [100%]
    正在升级/安装...
       1:apr-1.4.8-7.el7                  ################################# [ 25%]
       2:apr-util-1.5.2-6.el7             ################################# [ 50%]
       3:httpd-tools-2.4.6-97.el7.centos.5################################# [ 75%]
       4:httpd-2.4.6-97.el7.centos.5      ################################# [100%]
    [root@controller download]# httpd  -v
    Server version: Apache/2.4.6 (CentOS)
    Server built:   Mar 24 2022 14:57:57
    [root@controller download]#
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27
    • 28
    • 29
    • 30
    • 31
    • 32
    • 33
    • 34
    • 35
    • 36
    • 37
    • 38
    • 39
    • 40
    • 41
    • 42
    • 43
    • 44
    • 45
    • 46
    • 47
    • 48
    • 49
    • 50
    • 51
    • 52
    • 53
    • 54
    • 55
    • 56
    • 57
    • 58
    • 59
    • 60
    • 61
    • 62
    • 63
    • 64
    • 65
    • 66
    • 67
    • 68
    • 69
    • 70
    • 71
    • 72
    • 73
    • 74
    • 75
    • 76
    • 77
    • 78
    • 79
    • 80
    • 81
    • 82

    下载mod_ssl离线安装

    [root@controller download]# mod_ssl -v
    bash: mod_ssl: 未找到命令...
    [root@controller download]# openssl -v
    openssl:Error: '-v' is an invalid command.
    
    Standard commands
    asn1parse         ca                ciphers           cms
    crl               crl2pkcs7         dgst              dh
    dhparam           dsa               dsaparam          ec
    ecparam           enc               engine            errstr
    gendh             gendsa            genpkey           genrsa
    nseq              ocsp              passwd            pkcs12
    pkcs7             pkcs8             pkey              pkeyparam
    pkeyutl           prime             rand              req
    rsa               rsautl            s_client          s_server
    s_time            sess_id           smime             speed
    spkac             ts                verify            version
    x509
    
    Message Digest commands (see the `dgst' command for more details)
    md2               md4               md5               rmd160
    sha               sha1
    
    Cipher commands (see the `enc' command for more details)
    aes-128-cbc       aes-128-ecb       aes-192-cbc       aes-192-ecb
    aes-256-cbc       aes-256-ecb       base64            bf
    bf-cbc            bf-cfb            bf-ecb            bf-ofb
    camellia-128-cbc  camellia-128-ecb  camellia-192-cbc  camellia-192-ecb
    camellia-256-cbc  camellia-256-ecb  cast              cast-cbc
    cast5-cbc         cast5-cfb         cast5-ecb         cast5-ofb
    des               des-cbc           des-cfb           des-ecb
    des-ede           des-ede-cbc       des-ede-cfb       des-ede-ofb
    des-ede3          des-ede3-cbc      des-ede3-cfb      des-ede3-ofb
    des-ofb           des3              desx              idea
    idea-cbc          idea-cfb          idea-ecb          idea-ofb
    rc2               rc2-40-cbc        rc2-64-cbc        rc2-cbc
    rc2-cfb           rc2-ecb           rc2-ofb           rc4
    rc4-40            rc5               rc5-cbc           rc5-cfb
    rc5-ecb           rc5-ofb           seed              seed-cbc
    seed-cfb          seed-ecb          seed-ofb          zlib
    
    [root@controller download]# sudo yum install --downloadonly mod_ssl --downloaddir=/download/
    已加载插件:fastestmirror
    Loading mirror speeds from cached hostfile
    正在解决依赖关系
    --> 正在检查事务
    ---> 软件包 mod_ssl.x86_64.1.2.4.6-97.el7.centos.5 将被 安装
    --> 解决依赖关系完成
    
    依赖关系解决
    
    ================================================================================
     Package       架构         版本                            源             大小
    ================================================================================
    正在安装:
     mod_ssl       x86_64       1:2.4.6-97.el7.centos.5         updates       115 k
    
    事务概要
    ================================================================================
    安装  1 软件包
    
    总下载量:115 k
    安装大小:224 k
    Background downloading packages, then exiting:
    mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm                   | 115 kB   00:00
    exiting because "Download Only" specified
    [root@controller download]# ls
    apr-1.4.8-7.el7.x86_64.rpm                    解决依赖关系完成
    apr-util-1.5.2-6.el7.x86_64.rpm               软件包
    httpd-2.4.6-97.el7.centos.5.x86_64.rpm        正在处理依赖关系
    httpd-tools-2.4.6-97.el7.centos.5.x86_64.rpm  正在检查事务
    mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm
    [root@controller download]# rpm -ivh mod_ssl-2.4.6-97.el7.centos.5.x86_64.rpm
    准备中...                          ################################# [100%]
    正在升级/安装...
       1:mod_ssl-1:2.4.6-97.el7.centos.5  ################################# [100%]
    [root@controller download]# mod_ssl -v
    bash: mod_ssl: 未找到命令...
    [root@controller download]#
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27
    • 28
    • 29
    • 30
    • 31
    • 32
    • 33
    • 34
    • 35
    • 36
    • 37
    • 38
    • 39
    • 40
    • 41
    • 42
    • 43
    • 44
    • 45
    • 46
    • 47
    • 48
    • 49
    • 50
    • 51
    • 52
    • 53
    • 54
    • 55
    • 56
    • 57
    • 58
    • 59
    • 60
    • 61
    • 62
    • 63
    • 64
    • 65
    • 66
    • 67
    • 68
    • 69
    • 70
    • 71
    • 72
    • 73
    • 74
    • 75
    • 76
    • 77
    • 78
    • 79
    • 80

    一、生成证书

    OpenSSL生成key和证书:

    [root@controller html]# mkdir /etc/ssl/private
    [root@controller html]# cd /etc/ssl/
    [root@controller ssl]# ll
    总用量 0
    lrwxrwxrwx. 1 root root 16 811 17:41 certs -> ../pki/tls/certs
    drwxr-xr-x  2 root root  6 92 21:56 private
    [root@controller ssl]# chmod 700 /etc/ssl/private/
    [root@controller ssl]# ll
    总用量 0
    lrwxrwxrwx. 1 root root 16 811 17:41 certs -> ../pki/tls/certs
    drwx------  2 root root  6 92 21:56 private
    [root@controller ssl]# cd private/
    [root@controller private]# ls
    [root@controller private]# openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt
    Generating a 2048 bit RSA private key
    ............................................................+++
    ...........+++
    writing new private key to '/etc/ssl/private/apache-selfsigned.key'
    -----
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [XX]:CN
    State or Province Name (full name) []:HB
    Locality Name (eg, city) [Default City]:XG
    Organization Name (eg, company) [Default Company Ltd]:GA
    Organizational Unit Name (eg, section) []:gx
    Common Name (eg, your name or your server's hostname) []:nextcloud
    Email Address []:
    [root@controller private]#
    [root@controller private]# openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048
    Generating DH parameters, 2048 bit long safe prime, generator 2
    This is going to take a long time
    .......................................+................................+.............................................................................................................................................................+..........................................................................................................................................................................................++*++*
    [root@controller private]# ls
    apache-selfsigned.key
    [root@controller private]# cd ..
    [root@controller ssl]# ls
    certs  private
    [root@controller ssl]# cd certs/
    [root@controller certs]# ls
    apache-selfsigned.crt  ca-bundle.trust.crt  localhost.crt    Makefile
    ca-bundle.crt          dhparam.pem          make-dummy-cert  renew-dummy-cert
    [root@controller certs]# ll
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27
    • 28
    • 29
    • 30
    • 31
    • 32
    • 33
    • 34
    • 35
    • 36
    • 37
    • 38
    • 39
    • 40
    • 41
    • 42
    • 43
    • 44
    • 45
    • 46
    • 47
    • 48
    • 49

    二、安装配置ssl模块

    yum安装模块

    yum install mod_ssl
    vim /etc/httpd/conf.d/ssl.conf
    配置文件中更改下面的内容:

    DocumentRoot “/var/www/html”
    ServerName www.xxx.net.cn:443

    SSLCertificateFile /etc/ssl/certs/apache-selfsigned.crt
    SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key

    [root@controller certs]# ls
    apache-selfsigned.crt  ca-bundle.trust.crt  localhost.crt    Makefile
    ca-bundle.crt          dhparam.pem          make-dummy-cert  renew-dummy-cert
    [root@controller certs]# vi /etc/httpd/conf.d/ssl.conf
    
    • 1
    • 2
    • 3
    • 4

    检验配置:

    
    [root@controller certs]# apachectl configtest
    AH00558: httpd: Could not reliably determine the server's fully qualified domain         name, using 192.168.182.132. Set the 'ServerName' directive globally to suppres        s this message
    Syntax OK
    
    
    • 1
    • 2
    • 3
    • 4
    • 5

    三、重启服务
    systemctl restart httpd

    [root@controller certs]# systemctl restart httpd
    Job for httpd.service failed because the control process exited with error code. See "sy                                     stemctl status httpd.service" and "journalctl -xe" for details.
    [root@controller certs]# systemctl stop firewalld.service
    [root@controller certs]# systemctl restart httpd
    Job for httpd.service failed because the control process exited with error code. See "sy                                     stemctl status httpd.service" and "journalctl -xe" for details.
    [root@controller certs]# sentenforce 0
    bash: sentenforce: 未找到命令...
    [root@controller certs]# setenforce 0
    setenforce: SELinux is disabled
    [root@controller certs]# systemctl restart httpd
    Job for httpd.service failed because the control process exited with error code. See "sy                                     stemctl status httpd.service" and "journalctl -xe" for details.
    [root@controller certs]# systemctl status httpd
    ● httpd.service - The Apache HTTP Server
       Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disab                                     led)
       Active: failed (Result: exit-code) since 五 2022-09-02 22:12:05 CST; 22s ago
         Docs: man:httpd(8)
               man:apachectl(8)
      Process: 14064 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/                                     FAILURE)
     Main PID: 14064 (code=exited, status=1/FAILURE)
    
    902 22:12:04 controller systemd[1]: Starting The Apache HTTP Server...
    902 22:12:04 controller httpd[14064]: AH00558: httpd: Could not reliably determ...ge
    902 22:12:04 controller httpd[14064]: (98)Address already in use: AH00072: make...80
    902 22:12:04 controller httpd[14064]: (98)Address already in use: AH00072: make...80
    902 22:12:04 controller httpd[14064]: no listening sockets available, shutting down
    902 22:12:04 controller httpd[14064]: AH00015: Unable to open logs
    902 22:12:05 controller systemd[1]: httpd.service: main process exited, code=ex...RE
    902 22:12:05 controller systemd[1]: Failed to start The Apache HTTP Server.
    902 22:12:05 controller systemd[1]: Unit httpd.service entered failed state.
    902 22:12:05 controller systemd[1]: httpd.service failed.
    Hint: Some lines were ellipsized, use -l to show in full.
    [root@controller certs]# (98)Address already in use: AH00072: make...80
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27
    • 28
    • 29
    • 30
    • 31
    • 32
    • 33

    发现80端口被占用

    [root@controller certs]# netstat -lnp |grep 80
    tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      3733/docker-proxy
    tcp        0      0 0.0.0.0:8088            0.0.0.0:*               LISTEN      4304/docker-proxy
    tcp6       0      0 :::80                   :::*                    LISTEN      3739/docker-proxy
    tcp6       0      0 :::8088                 :::*                    LISTEN      4311/docker-proxy
    udp        0      0 127.0.0.1:323           0.0.0.0:*                           780/chronyd
    udp6       0      0 ::1:323                 :::*                                780/chronyd
    unix  2      [ ACC ]     STREAM     LISTENING     80529    10625/pulseaudio     /tmp/.esd-0/socket
    unix  2      [ ACC ]     STREAM     LISTENING     42780    1729/master          private/anvil
    unix  2      [ ACC ]     STREAM     LISTENING     44870    3798/containerd-shi  /run/containerd/s/1b4ac5c87b949ec6b95bc6f0ce00ac09caa4d5fe452ef969a180a5eb4bca6283
    unix  2      [ ACC ]     STREAM     LISTENING     80531    10625/pulseaudio     /run/user/0/pulse/native
    unix  2      [ ACC ]     STREAM     LISTENING     27803    764/abrtd            /var/run/abrt/abrt.socket
    [root@controller certs]# systemctl stop docker
    Warning: Stopping docker.service, but it can still be activated by:
      docker.socket
    [root@controller certs]# netstat -lnp |grep 80
    udp        0      0 127.0.0.1:323           0.0.0.0:*                           780/chronyd
    udp6       0      0 ::1:323                 :::*                                780/chronyd
    unix  2      [ ACC ]     STREAM     LISTENING     80529    10625/pulseaudio     /tmp/.esd-0/socket
    unix  2      [ ACC ]     STREAM     LISTENING     42780    1729/master          private/anvil
    unix  2      [ ACC ]     STREAM     LISTENING     80531    10625/pulseaudio     /run/user/0/pulse/native
    unix  2      [ ACC ]     STREAM     LISTENING     27803    764/abrtd            /var/run/abrt/abrt.socket
    [root@controller certs]# systemctl restart httpd
    [root@controller certs]# cd /var/www/html/
    [root@controller html]# ls
    [root@controller html]#
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
    • 7
    • 8
    • 9
    • 10
    • 11
    • 12
    • 13
    • 14
    • 15
    • 16
    • 17
    • 18
    • 19
    • 20
    • 21
    • 22
    • 23
    • 24
    • 25
    • 26
    • 27

    防火墙设置

    [root@controller html]# firewall-cmd --zone=public --add-port=443/tcp --permanent
    FirewallD is not running
    [root@controller html]# firewall-cmd --reload
    FirewallD is not running
    [root@controller html]#
    
    
    • 1
    • 2
    • 3
    • 4
    • 5
    • 6
  • 相关阅读:
    干货|建模3D Max中常见问题
    《七月集训》第十三日——双向链表
    137页Python学习笔记,全面总结看这一篇就够了
    【快速掌握Docker】Docker高级运用汇总--Dockerfile、Docker Compose与Docker Swarm使用
    【Hadoop】Hadoop 调优
    JetLinks物联网基础平台-2.0,正式发布,全新架构、全新的前端UI
    三分钟了解前端javaScript
    macOS 14 Sonoma 如何删除不需要的 4k 动态壁纸
    Gradle项目转Maven项目
    苍穹外卖 -- day11 - Apache ECharts- 营业额统计- 用户统计- 订单统计- 销量排名Top10
  • 原文地址:https://blog.csdn.net/weixin_44048054/article/details/126670915