teratail header banner
teratail header banner
質問するログイン新規登録

質問編集履歴

3

ssl.conf追記

2019/02/24 14:54

投稿

ginuser
ginuser

スコア13

title CHANGED
File without changes
body CHANGED
@@ -40,258 +40,64 @@
40
40
  尚Responseの方はタイムアウト終了後空白でした。
41
41
 
42
42
  追追記)
43
- httpd.confの中身です。
44
43
  ```ここに言語を入力
45
- [ec2-user@myaws conf]$ cat httpd.conf
44
+ [ec2-user@myaws conf.d]$ cat ssl.conf
46
45
 
47
- ServerRoot "/etc/httpd"
46
+ Listen 443 https
48
47
 
49
- Listen 80
48
+ SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
50
49
 
50
+ SSLSessionCache shmcb:/run/httpd/sslcache(512000)
51
- Include conf.modules.d/*.conf
51
+ SSLSessionCacheTimeout 300
52
52
 
53
- User apache
53
+ SSLRandomSeed startup file:/dev/urandom 256
54
- Group apache
54
+ SSLRandomSeed connect builtin
55
+ #SSLRandomSeed startup file:/dev/random 512
56
+ #SSLRandomSeed connect file:/dev/random 512
57
+ #SSLRandomSeed connect file:/dev/urandom 512
55
58
 
56
- ServerAdmin root@localhost
59
+ SSLCryptoDevice builtin
60
+ #SSLCryptoDevice ubsec
57
61
 
58
- ServerName myaws
59
62
 
60
- <Directory />
63
+ <VirtualHost _default_:443>
61
- AllowOverride All
62
- </Directory>
63
64
 
64
65
  DocumentRoot "/var/www/html"
65
66
 
66
- <Directory "/var/www">
67
- AllowOverride All
68
- # Allow open access:
69
- Require all granted
67
+ ServerName myaws:443
70
- </Directory>
71
68
 
72
- # Further relax access to the default document root:
73
- <Directory "/var/www/html">
74
- #
75
- # Possible values for the Options directive are "None", "All",
76
- # or any combination of:
77
- # Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
78
- #
79
- # Note that "MultiViews" must be named *explicitly* --- "Options All"
80
- # doesn't give it to you.
81
- #
82
- # The Options directive is both complicated and important. Please see
83
- # http://httpd.apache.org/docs/2.4/mod/core.html#options
84
- # for more information.
85
- #
86
- Options Indexes FollowSymLinks
87
-
88
- #
89
- # AllowOverride controls what directives may be placed in .htaccess files.
90
- # It can be "All", "None", or any combination of the keywords:
91
- # Options FileInfo AuthConfig Limit
92
- #
93
- AllowOverride All
94
-
95
- #
96
- # Controls who can get stuff from this server.
97
- #
98
- Require all granted
99
- </Directory>
100
-
101
- #
102
- # DirectoryIndex: sets the file that Apache will serve if a directory
103
- # is requested.
104
- #
105
- <IfModule dir_module>
106
- DirectoryIndex index.php index.html
107
- </IfModule>
108
-
109
- #
110
- # The following lines prevent .htaccess and .htpasswd files from being
111
- # viewed by Web clients.
112
- #
113
- <Files ".ht*">
114
- Require all denied
115
- </Files>
116
-
117
- #
118
- # ErrorLog: The location of the error log file.
119
- # If you do not specify an ErrorLog directive within a <VirtualHost>
120
- # container, error messages relating to that virtual host will be
121
- # logged here. If you *do* define an error logfile for a <VirtualHost>
122
- # container, that host's errors will be logged there and not here.
123
- #
124
- ErrorLog "logs/error_log"
69
+ ErrorLog logs/ssl_error_log
125
-
126
- #
127
- # LogLevel: Control the number of messages logged to the error_log.
70
+ TransferLog logs/ssl_access_log
128
- # Possible values include: debug, info, notice, warn, error, crit,
129
- # alert, emerg.
130
- #
131
71
  LogLevel warn
132
72
 
133
- <IfModule log_config_module>
134
- #
135
- # The following directives define some format nicknames for use with
136
- # a CustomLog directive (see below).
73
+ SSLEngine on
137
- #
138
- LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
139
- LogFormat "%h %l %u %t \"%r\" %>s %b" common
140
74
 
75
+ SSLProtocol all -SSLv3
141
- <IfModule logio_module>
76
+ SSLProxyProtocol all -SSLv3
142
- # You need to enable mod_logio.c to use %I and %O
143
- LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
144
- </IfModule>
145
77
 
146
- #
147
- # The location and format of the access logfile (Common Logfile Format).
148
- # If you do not define any access logfiles within a <VirtualHost>
149
- # container, they will be logged here. Contrariwise, if you *do*
150
- # define per-<VirtualHost> access logfiles, transactions will be
151
- # logged therein and *not* in this file.
78
+ SSLHonorCipherOrder on
152
- #
153
- #CustomLog "logs/access_log" common
154
79
 
155
- #
156
- # If you prefer a logfile with access, agent, and referer information
157
- # (Combined Logfile Format) you can use the following directive.
80
+ SSLCertificateFile /etc/letsencrypt/live/mysite.com/cert.pem
158
- #
159
- CustomLog "logs/access_log" combined
160
- </IfModule>
161
81
 
162
- <IfModule alias_module>
163
- #
164
- # Redirect: Allows you to tell clients about documents that used to
165
- # exist in your server's namespace, but do not anymore. The client
166
- # will make a new request for the document at its new location.
167
- # Example:
168
- # Redirect permanent /foo http://www.example.com/bar
82
+ SSLCertificateKeyFile /etc/letsencrypt/live/mysite.com/privkey.pem
169
83
 
170
- #
171
- # Alias: Maps web paths into filesystem paths and is used to
172
- # access content that does not live under the DocumentRoot.
173
- # Example:
174
- # Alias /webpath /full/filesystem/path
84
+ SSLCertificateChainFile /etc/letsencrypt/live/mysite.com/chain.pem
175
- #
176
- # If you include a trailing / on /webpath then the server will
177
- # require it to be present in the URL. You will also likely
178
- # need to provide a <Directory> section to allow access to
179
- # the filesystem path.
180
85
 
181
- #
182
- # ScriptAlias: This controls which directories contain server scripts.
183
- # ScriptAliases are essentially the same as Aliases, except that
86
+ <FilesMatch ".(cgi|shtml|phtml|php)$">
184
- # documents in the target directory are treated as applications and
185
- # run by the server when requested rather than as documents sent to the
186
- # client. The same rules about trailing "/" apply to ScriptAlias
187
- # directives as to Alias.
87
+ SSLOptions +StdEnvVars
188
- #
189
- ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
190
-
191
- </IfModule>
88
+ </FilesMatch>
192
-
193
- #
194
- # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
195
- # CGI directory exists, if you have that configured.
196
- #
197
89
  <Directory "/var/www/cgi-bin">
198
- AllowOverride All
199
- Options None
90
+ SSLOptions +StdEnvVars
200
- Require all granted
201
91
  </Directory>
202
92
 
203
- <IfModule mime_module>
204
- #
205
- # TypesConfig points to the file containing the list of mappings from
93
+ BrowserMatch "MSIE [2-5]"nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
206
- # filename extension to MIME-type.
207
- #
208
- TypesConfig /etc/mime.types
209
94
 
210
- #
211
- # AddType allows you to add to or override the MIME configuration
95
+ CustomLog logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
212
- # file specified in TypesConfig for specific file types.
213
- #
214
- #AddType application/x-gzip .tgz
215
- #
216
- # AddEncoding allows you to have certain browsers uncompress
217
- # information on the fly. Note: Not all browsers support this.
218
- #
219
- #AddEncoding x-compress .Z
220
- #AddEncoding x-gzip .gz .tgz
221
- #
222
- # If the AddEncoding directives above are commented-out, then you
223
- # probably should define those extensions to indicate media types:
224
- #
225
- AddType application/x-compress .Z
226
- AddType application/x-gzip .gz .tgz
227
96
 
228
- #
229
- # AddHandler allows you to map certain file extensions to "handlers":
230
- # actions unrelated to filetype. These can be either built into the server
231
- # or added with the Action directive (see below)
232
- #
233
- # To use CGI scripts outside of ScriptAliased directories:
234
- # (You will also need to add "ExecCGI" to the "Options" directive.)
235
- #
236
- #AddHandler cgi-script .cgi
97
+ ServerAlias mysite.com
98
+ #SSLCertificateFile /etc/letsencrypt/live/mysite.com/fullchain.pem
99
+ #SSLCertificateKeyFile /etc/letsencrypt/live/mysite.com/privkey.pem
100
+ Include /etc/letsencrypt/options-ssl-apache.conf
101
+ </VirtualHost>
237
102
 
238
- # For type maps (negotiated resources):
239
- #AddHandler type-map var
240
-
241
- #
242
- # Filters allow you to process content before it is sent to the client.
243
- #
244
- # To parse .shtml files for server-side includes (SSI):
245
- # (You will also need to add "Includes" to the "Options" directive.)
246
- #
247
- AddType text/html .shtml
248
- AddOutputFilter INCLUDES .shtml
249
- </IfModule>
250
-
251
- #
252
- # Specify a default charset for all content served; this enables
253
- # interpretation of all content as UTF-8 by default. To use the
254
- # default browser choice (ISO-8859-1), or to allow the META tags
255
- # in HTML content to override this choice, comment out this
256
- # directive:
257
- #
258
- AddDefaultCharset UTF-8
259
-
260
- <IfModule mime_magic_module>
261
- #
262
- # The mod_mime_magic module allows the server to use various hints from the
263
- # contents of the file itself to determine its type. The MIMEMagicFile
264
- # directive tells the module where the hint definitions are located.
265
- #
266
- MIMEMagicFile conf/magic
267
- </IfModule>
268
-
269
- #
270
- # Customizable error responses come in three flavors:
271
- # 1) plain text 2) local redirects 3) external redirects
272
- #
273
- # Some examples:
274
- #ErrorDocument 500 "The server made a boo boo."
275
- #ErrorDocument 404 /missing.html
276
- #ErrorDocument 404 "/cgi-bin/missing_handler.pl"
277
- #ErrorDocument 402 http://www.example.com/subscription_info.html
278
- #
279
-
280
- #
281
- # EnableMMAP and EnableSendfile: On systems that support it,
282
- # memory-mapping or the sendfile syscall may be used to deliver
283
- # files. This usually improves server performance, but must
284
- # be turned off when serving from networked-mounted
285
- # filesystems or if support for these functions is otherwise
286
- # broken on your system.
287
- # Defaults if commented: EnableMMAP On, EnableSendfile Off
288
- #
289
- #EnableMMAP off
290
- EnableSendfile on
291
-
292
- # Supplemental configuration
293
- #
294
- # Load config files in the "/etc/httpd/conf.d" directory, if any.
295
- IncludeOptional conf.d/*.conf
296
-
297
103
  ```

2

httpd,conf追記

2019/02/24 14:54

投稿

ginuser
ginuser

スコア13

title CHANGED
File without changes
body CHANGED
@@ -37,4 +37,261 @@
37
37
  追記)
38
38
  アクセス時のHTTPヘッダの中身です。
39
39
  ![イメージ説明](dc04b79c091b2a032b55e3edb0482ef3.png)
40
- 尚Responseの方はタイムアウト終了後空白でした。
40
+ 尚Responseの方はタイムアウト終了後空白でした。
41
+
42
+ 追追記)
43
+ httpd.confの中身です。
44
+ ```ここに言語を入力
45
+ [ec2-user@myaws conf]$ cat httpd.conf
46
+
47
+ ServerRoot "/etc/httpd"
48
+
49
+ Listen 80
50
+
51
+ Include conf.modules.d/*.conf
52
+
53
+ User apache
54
+ Group apache
55
+
56
+ ServerAdmin root@localhost
57
+
58
+ ServerName myaws
59
+
60
+ <Directory />
61
+ AllowOverride All
62
+ </Directory>
63
+
64
+ DocumentRoot "/var/www/html"
65
+
66
+ <Directory "/var/www">
67
+ AllowOverride All
68
+ # Allow open access:
69
+ Require all granted
70
+ </Directory>
71
+
72
+ # Further relax access to the default document root:
73
+ <Directory "/var/www/html">
74
+ #
75
+ # Possible values for the Options directive are "None", "All",
76
+ # or any combination of:
77
+ # Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
78
+ #
79
+ # Note that "MultiViews" must be named *explicitly* --- "Options All"
80
+ # doesn't give it to you.
81
+ #
82
+ # The Options directive is both complicated and important. Please see
83
+ # http://httpd.apache.org/docs/2.4/mod/core.html#options
84
+ # for more information.
85
+ #
86
+ Options Indexes FollowSymLinks
87
+
88
+ #
89
+ # AllowOverride controls what directives may be placed in .htaccess files.
90
+ # It can be "All", "None", or any combination of the keywords:
91
+ # Options FileInfo AuthConfig Limit
92
+ #
93
+ AllowOverride All
94
+
95
+ #
96
+ # Controls who can get stuff from this server.
97
+ #
98
+ Require all granted
99
+ </Directory>
100
+
101
+ #
102
+ # DirectoryIndex: sets the file that Apache will serve if a directory
103
+ # is requested.
104
+ #
105
+ <IfModule dir_module>
106
+ DirectoryIndex index.php index.html
107
+ </IfModule>
108
+
109
+ #
110
+ # The following lines prevent .htaccess and .htpasswd files from being
111
+ # viewed by Web clients.
112
+ #
113
+ <Files ".ht*">
114
+ Require all denied
115
+ </Files>
116
+
117
+ #
118
+ # ErrorLog: The location of the error log file.
119
+ # If you do not specify an ErrorLog directive within a <VirtualHost>
120
+ # container, error messages relating to that virtual host will be
121
+ # logged here. If you *do* define an error logfile for a <VirtualHost>
122
+ # container, that host's errors will be logged there and not here.
123
+ #
124
+ ErrorLog "logs/error_log"
125
+
126
+ #
127
+ # LogLevel: Control the number of messages logged to the error_log.
128
+ # Possible values include: debug, info, notice, warn, error, crit,
129
+ # alert, emerg.
130
+ #
131
+ LogLevel warn
132
+
133
+ <IfModule log_config_module>
134
+ #
135
+ # The following directives define some format nicknames for use with
136
+ # a CustomLog directive (see below).
137
+ #
138
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
139
+ LogFormat "%h %l %u %t \"%r\" %>s %b" common
140
+
141
+ <IfModule logio_module>
142
+ # You need to enable mod_logio.c to use %I and %O
143
+ LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
144
+ </IfModule>
145
+
146
+ #
147
+ # The location and format of the access logfile (Common Logfile Format).
148
+ # If you do not define any access logfiles within a <VirtualHost>
149
+ # container, they will be logged here. Contrariwise, if you *do*
150
+ # define per-<VirtualHost> access logfiles, transactions will be
151
+ # logged therein and *not* in this file.
152
+ #
153
+ #CustomLog "logs/access_log" common
154
+
155
+ #
156
+ # If you prefer a logfile with access, agent, and referer information
157
+ # (Combined Logfile Format) you can use the following directive.
158
+ #
159
+ CustomLog "logs/access_log" combined
160
+ </IfModule>
161
+
162
+ <IfModule alias_module>
163
+ #
164
+ # Redirect: Allows you to tell clients about documents that used to
165
+ # exist in your server's namespace, but do not anymore. The client
166
+ # will make a new request for the document at its new location.
167
+ # Example:
168
+ # Redirect permanent /foo http://www.example.com/bar
169
+
170
+ #
171
+ # Alias: Maps web paths into filesystem paths and is used to
172
+ # access content that does not live under the DocumentRoot.
173
+ # Example:
174
+ # Alias /webpath /full/filesystem/path
175
+ #
176
+ # If you include a trailing / on /webpath then the server will
177
+ # require it to be present in the URL. You will also likely
178
+ # need to provide a <Directory> section to allow access to
179
+ # the filesystem path.
180
+
181
+ #
182
+ # ScriptAlias: This controls which directories contain server scripts.
183
+ # ScriptAliases are essentially the same as Aliases, except that
184
+ # documents in the target directory are treated as applications and
185
+ # run by the server when requested rather than as documents sent to the
186
+ # client. The same rules about trailing "/" apply to ScriptAlias
187
+ # directives as to Alias.
188
+ #
189
+ ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
190
+
191
+ </IfModule>
192
+
193
+ #
194
+ # "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
195
+ # CGI directory exists, if you have that configured.
196
+ #
197
+ <Directory "/var/www/cgi-bin">
198
+ AllowOverride All
199
+ Options None
200
+ Require all granted
201
+ </Directory>
202
+
203
+ <IfModule mime_module>
204
+ #
205
+ # TypesConfig points to the file containing the list of mappings from
206
+ # filename extension to MIME-type.
207
+ #
208
+ TypesConfig /etc/mime.types
209
+
210
+ #
211
+ # AddType allows you to add to or override the MIME configuration
212
+ # file specified in TypesConfig for specific file types.
213
+ #
214
+ #AddType application/x-gzip .tgz
215
+ #
216
+ # AddEncoding allows you to have certain browsers uncompress
217
+ # information on the fly. Note: Not all browsers support this.
218
+ #
219
+ #AddEncoding x-compress .Z
220
+ #AddEncoding x-gzip .gz .tgz
221
+ #
222
+ # If the AddEncoding directives above are commented-out, then you
223
+ # probably should define those extensions to indicate media types:
224
+ #
225
+ AddType application/x-compress .Z
226
+ AddType application/x-gzip .gz .tgz
227
+
228
+ #
229
+ # AddHandler allows you to map certain file extensions to "handlers":
230
+ # actions unrelated to filetype. These can be either built into the server
231
+ # or added with the Action directive (see below)
232
+ #
233
+ # To use CGI scripts outside of ScriptAliased directories:
234
+ # (You will also need to add "ExecCGI" to the "Options" directive.)
235
+ #
236
+ #AddHandler cgi-script .cgi
237
+
238
+ # For type maps (negotiated resources):
239
+ #AddHandler type-map var
240
+
241
+ #
242
+ # Filters allow you to process content before it is sent to the client.
243
+ #
244
+ # To parse .shtml files for server-side includes (SSI):
245
+ # (You will also need to add "Includes" to the "Options" directive.)
246
+ #
247
+ AddType text/html .shtml
248
+ AddOutputFilter INCLUDES .shtml
249
+ </IfModule>
250
+
251
+ #
252
+ # Specify a default charset for all content served; this enables
253
+ # interpretation of all content as UTF-8 by default. To use the
254
+ # default browser choice (ISO-8859-1), or to allow the META tags
255
+ # in HTML content to override this choice, comment out this
256
+ # directive:
257
+ #
258
+ AddDefaultCharset UTF-8
259
+
260
+ <IfModule mime_magic_module>
261
+ #
262
+ # The mod_mime_magic module allows the server to use various hints from the
263
+ # contents of the file itself to determine its type. The MIMEMagicFile
264
+ # directive tells the module where the hint definitions are located.
265
+ #
266
+ MIMEMagicFile conf/magic
267
+ </IfModule>
268
+
269
+ #
270
+ # Customizable error responses come in three flavors:
271
+ # 1) plain text 2) local redirects 3) external redirects
272
+ #
273
+ # Some examples:
274
+ #ErrorDocument 500 "The server made a boo boo."
275
+ #ErrorDocument 404 /missing.html
276
+ #ErrorDocument 404 "/cgi-bin/missing_handler.pl"
277
+ #ErrorDocument 402 http://www.example.com/subscription_info.html
278
+ #
279
+
280
+ #
281
+ # EnableMMAP and EnableSendfile: On systems that support it,
282
+ # memory-mapping or the sendfile syscall may be used to deliver
283
+ # files. This usually improves server performance, but must
284
+ # be turned off when serving from networked-mounted
285
+ # filesystems or if support for these functions is otherwise
286
+ # broken on your system.
287
+ # Defaults if commented: EnableMMAP On, EnableSendfile Off
288
+ #
289
+ #EnableMMAP off
290
+ EnableSendfile on
291
+
292
+ # Supplemental configuration
293
+ #
294
+ # Load config files in the "/etc/httpd/conf.d" directory, if any.
295
+ IncludeOptional conf.d/*.conf
296
+
297
+ ```

1

画像を追加しました

2019/02/24 14:00

投稿

ginuser
ginuser

スコア13

title CHANGED
File without changes
body CHANGED
@@ -32,4 +32,9 @@
32
32
  現状、http://ドメイン名では通常通りアクセスができる状態です。
33
33
 
34
34
  どなたか上記のような現象に心当たりがございましたらお教えいただければと思います。
35
- よろしくお願いいたします。
35
+ よろしくお願いいたします。
36
+
37
+ 追記)
38
+ アクセス時のHTTPヘッダの中身です。
39
+ ![イメージ説明](dc04b79c091b2a032b55e3edb0482ef3.png)
40
+ 尚Responseの方はタイムアウト終了後空白でした。