网站需求：
1.基于域名 www.openlab.com 可以访问网站内容为 welcome to openlab!!!
2.给该公司创建三个子界面分别显示学生信息，教学资料和缴费网站，
1、基于 www.openlab.com/student 网站访问学生信息，
2、基于 www.openlab.com/data 网站访问教学资料
3、基于 www.openlab.com/money 网站访问缴费网站。
3.要求
（1）学生信息网站只有 song 和 tian 两个用户可以访问，其他用户不能访问。
（2）访问缴费网站实现数据加密基于 https 访问。
一、创建openlab网站
编辑vhost.conf文件
vim /etc/httpd/conf.d/vhost0.conf
<directory /openlab>
allowoverride none
require all granted
</directory>
<virtualhost 192.168.159.133:80>
servername www.openlab.com
documentroot /openlab
</virtualhost>
注意：需要创建/openlab文件，并写入index.html文件
mkdir /openlab
echo "welcome to openlab!!!" > /openlab/index.html
运行：
二、编辑/student网站
在/openlab下创建/student文件，并写入index.html文件
mkdir /openlab/student
echo "welcome to student , students' informati on are all in here" > /student/index.html
创建两用户只能他们来访问该网站
代码： htpasswd -c /etc/httpd/user song
New password:
Re-type new password:
Adding password for user song
代码： htpasswd /etc/httpd/user tian
New password:
Re-type new password:
Adding password for user tian
<directory /openlab>
allowoverride none
require all granted
</directory>
<directory /openlab/student>
authtype basic
authname "please login: "
authuserfile /etc/httpd/user
require user song tian
</directory>
<virtualhost 192.168.159.133:80>
servername www.openlab.com/student
documentroot /openlab
alias /student /openlab/student
</virtualhost>
运行：
三、编辑/data网站
在/openlab下创建/datat文件，并写入index.html文件
mkdir /openlab/data
"welcom to data!!!" > /data/index.html
<directory /openlab>
allowoverride none
require all granted
</directory>
<virtualhost 192.168.159.133:80>
servername www.openlab.com
documentroot /openlab
alias /openlab /openlab/data
</virtualhost>
运行：
三、编辑/money网站
在/openlab下创建/datat文件，并写入index.html文件
mkdir /openlab/money
"welcome to money !!!" > /money/index.html
加密：
[root@localhost money]# cd /etc/pki/tls/certs 注意，该代码要在该目录下输入
[root@localhost certs]# openssl genrsa > chs.key
[root@localhost certs]# ll
total 12
lrwxrwxrwx. 1 root root 49 Jul 29 2022 ca-bundle.crt -> /etc/pki/ca-t rust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx. 1 root root 55 Jul 29 2022 ca-bundle.trust.crt -> /etc/pk i/ca-trust/extracted/openssl/ca-bundle.trust.crt
-rw-r--r--. 1 root root 1704 Nov 13 14:57 chs.key
-rw-r--r--. 1 root root 1367 Nov 11 20:55 jiami.crt
-rw-r--r--. 1 root root 3980 Nov 11 20:55 localhost.crt
[root@localhost certs]# openssl req -utf8 -new -key chs.key -x509 -days 100 -out chs.crt
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:86
State or Province Name (full name) []:cq
Locality Name (eg, city) [Default City]:cq
Organization Name (eg, company) [Default Company Ltd]:cq
Organizational Unit Name (eg, section) []:ce
Common Name (eg, your name or your server's hostname) []:www.openlab.com 你要访问的文件
Email Address []:admin@123
[root@localhost certs]# ll
total 16
lrwxrwxrwx. 1 root root 49 Jul 29 2022 ca-bundle.crt -> /etc/pki/ca-t rust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx. 1 root root 55 Jul 29 2022 ca-bundle.trust.crt -> /etc/pk i/ca-trust/extracted/openssl/ca-bundle.trust.crt
-rw-r--r--. 1 root root 1399 Nov 13 14:59 chs.crt
-rw-r--r--. 1 root root 1704 Nov 13 14:57 chs.key
-rw-r--r--. 1 root root 1367 Nov 11 20:55 jiami.crt
-rw-r--r--. 1 root root 3980 Nov 11 20:55 localhost.crt
[root@localhost certs]# mv chs.key ../private/ 将.key文件移动到private目录下面
<directory /openlab>
allowoverride none
require all granted
</directory>
<virtualhost 192.168.159.133:443>
servername www.openlab.com
documentroot /openlab
alias /money /openlab/money
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/chs.crt
SSLCertificateKeyFile /etc/pki/tls/private/chs.key
</virtualhost>
<virtualhost 192.168.159.133:443>
servername 192.168.159.133
documentroot /openlab
alias /money /openlab/money
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/chs.crt
SSLCertificateKeyFile /etc/pki/tls/private/chs.key
</virtualhost>
运行：
