質問編集履歴

httpd.conf ssl.conf編集しました

2021/08/13 09:36

投稿

Athenahack

スコア2

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -226,10 +226,16 @@
 var/www/phpMyAdmin/のユーザーとグループの所有者はapacheに変えました。
+######追記　httpd.confの中身
+mod_sslを入れたところ、ssl.confが編集できるようになったのでssl.confを設定した上でhttpd.confを編集しました。
 ```httpd.conf
@@ -264,8 +270,6 @@
 Listen 80
-Listen 443
 #
@@ -290,14 +294,6 @@
 #
-#
-#
 User apache
 Group apache
@@ -348,14 +344,6 @@
 #
-#
-#
 DocumentRoot "/var/www/html"
@@ -810,4 +798,4 @@
-何か設定ミスありますでしょうか？
+ssl.confを設定した上でですが、どこか設定ミスありますでしょうか？

SSL

2021/08/13 09:36

投稿

Athenahack

スコア2

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -32,7 +32,9 @@
+これを参照してSSL化しました。
+https://dev.classmethod.jp/articles/make-amazon-lightsail-instance-https/
@@ -214,6 +216,12 @@
+これを参照してSSL化しました。
+https://dev.classmethod.jp/articles/make-amazon-lightsail-instance-https/
 以下、apahceの設定ファイルです。

追記しました

2021/08/13 07:20

投稿

Athenahack

スコア2

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -10,10 +10,6 @@
 ●環境
 AWS Lightsail(Amazon linux 2)
@@ -84,4 +80,726 @@
+SSL化する前まで~~はログインできていたので、~~もログインできていなかった気がします。
-SSL化する前まではログインできていたので、SSL化した後にphpmyadmin/以降のディレクトリにアクセスできないという事象になります。
+SSL化した後にphpmyadmin/以降のディレクトリにアクセスできないという事象になります。
+###追記　　起きている事象のパターンかきます
+まずSSL化状態の
+https://○○○/phpMyAdminでアクセスすると英語表記になります。
+ログインしようとすると下記504エラーが出力されます。
+#####タイムアウトの上限設定が原因？
+apache設定ファイルでタイムアウトを上限まで変えましたが同様です。CloudFront側でもタイムアウトを上限まで上げましたが同様でした。
+```
+「504 ERROR
+The request could not be satisfied.
+CloudFront attempted to establish a connection with the origin, but either the attempt failed or the origin closed the connection.
+ We can't connect to the server for this app or website at this time.
+There might be too much traffic or a configuration error.
+Try again later, or contact the app or website owner.
+If you provide content to customers through CloudFront,
+ you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.」
+```
+おそらくタイムアウト設定は関係なく、CloudFrontでSSL化した際の設定とかApache設定ファイルに問題があるかとは理解してます。
+#####httpとhttpsそれぞれでアクセスしたときの違い
+**https**://○○○/phpMyAdmin
+英語表記になる。
+ログインすると上記の504エラー出る　→　サイト更新すると一番最初に記載した問題の下記が出力されます
+```
+「Failed to set session cookie.
+Maybe you are using HTTP instead of HTTPS to access phpMyAdmin.」
+```
+___
+**http**://○○○/phpMyAdmin
+日本語表記になる。　SSL化する前のインストールした状態と同じ。
+ログインすると上記の504エラー出る　→　サイト更新すると一番最初に記載した問題の下記が出力されます
+SSL化する前のphpMyAdminインストールした当初はログインできていたのですが、今は504エラーが出ます。
+___
+**https**://○○○/**phpinfo.php**
+phpMyAdmin以外は普通に何の問題もなく表示されます。
+___
+#####cloudfrontにSSL証明書設定後、apacheですべき設定は何でしょうか？
+以下、apahceの設定ファイルです。
+var/www/phpMyAdmin/のユーザーとグループの所有者はapacheに変えました。
+```httpd.conf
+#
+# ServerRoot: The top of the directory tree under which the server's
+# configuration, error, and log files are kept.
+#
+ServerRoot "/etc/httpd"
+#
+#Listen 12.34.56.78:80
+Listen 80
+Listen 443
+#
+# Dynamic Shared Object (DSO) Support
+#
+#
+#
+# Example:
+# LoadModule foo_module modules/mod_foo.so
+#
+Include conf.modules.d/*.conf
+#
+#
+#
+User apache
+Group apache
+# 'Main' server configuration
+#
+#
+ServerAdmin root@localhost
+#
+#
+#ServerName www.example.com:80
+#
+#
+<Directory />
+    AllowOverride None
+    Require all granted
+</Directory>
+#
+#
+#
+#
+DocumentRoot "/var/www/html"
+#
+# Relax access to content within /var/www.
+#
+<Directory "/var/www">
+    AllowOverride None
+    # Allow open access:
+    Require all granted
+</Directory>
+# Further relax access to the default document root:
+<Directory "/var/www/html">
+    #
+    # Possible values for the Options directive are "None", "All",
+    # or any combination of:
+    #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
+    #
+    # Note that "MultiViews" must be named *explicitly* --- "Options All"
+    # doesn't give it to you.
+    #
+    # The Options directive is both complicated and important.  Please see
+    # http://httpd.apache.org/docs/2.4/mod/core.html#options
+    # for more information.
+    #
+    Options Indexes FollowSymLinks
+    #
+    # AllowOverride controls what directives may be placed in .htaccess files.
+    # It can be "All", "None", or any combination of the keywords:
+    #   Options FileInfo AuthConfig Limit
+    #
+    AllowOverride None
+    #
+    # Controls who can get stuff from this server.
+    #
+    Require all granted
+</Directory>
+#
+# DirectoryIndex: sets the file that Apache will serve if a directory
+# is requested.
+#
+<IfModule dir_module>
+    DirectoryIndex index.html
+</IfModule>
+#
+# The following lines prevent .htaccess and .htpasswd files from being
+# viewed by Web clients.
+#
+<Files ".ht*">
+    Require all denied
+</Files>
+#
+#
+ErrorLog "logs/error_log"
+#
+# LogLevel: Control the number of messages logged to the error_log.
+# Possible values include: debug, info, notice, warn, error, crit,
+# alert, emerg.
+#
+LogLevel warn
+<IfModule log_config_module>
+    #
+    # The following directives define some format nicknames for use with
+    # a CustomLog directive (see below).
+    #
+    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+    LogFormat "%h %l %u %t \"%r\" %>s %b" common
+    <IfModule logio_module>
+      # You need to enable mod_logio.c to use %I and %O
+      LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
+    </IfModule>
+    #
+    # The location and format of the access logfile (Common Logfile Format).
+    # If you do not define any access logfiles within a <VirtualHost>
+    # container, they will be logged here.  Contrariwise, if you *do*
+    # define per-<VirtualHost> access logfiles, transactions will be
+    # logged therein and *not* in this file.
+    #
+    #CustomLog "logs/access_log" common
+    #
+    # If you prefer a logfile with access, agent, and referer information
+    # (Combined Logfile Format) you can use the following directive.
+    #
+    CustomLog "logs/access_log" combined
+</IfModule>
+<IfModule alias_module>
+    #
+    # Example:
+    # Redirect permanent /foo http://www.example.com/bar
+    #
+    # Alias: Maps web paths into filesystem paths and is used to
+    # access content that does not live under the DocumentRoot.
+    # Example:
+    # Alias /webpath /full/filesystem/path
+    #
+    #
+    #
+    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
+</IfModule>
+#
+# "/var/www/cgi-bin" should be changed to whatever your ScriptAliased
+# CGI directory exists, if you have that configured.
+#
+<Directory "/var/www/cgi-bin">
+    AllowOverride None
+    Options None
+    Require all granted
+</Directory>
+<IfModule mime_module>
+    #
+    # TypesConfig points to the file containing the list of mappings from
+    # filename extension to MIME-type.
+    #
+    TypesConfig /etc/mime.types
+    #
+    # AddType allows you to add to or override the MIME configuration
+    # file specified in TypesConfig for specific file types.
+    #
+    #AddType application/x-gzip .tgz
+    #
+    #
+    #AddEncoding x-compress .Z
+    #AddEncoding x-gzip .gz .tgz
+    #
+    # If the AddEncoding directives above are commented-out, then you
+    # probably should define those extensions to indicate media types:
+    #
+    AddType application/x-compress .Z
+    AddType application/x-gzip .gz .tgz
+    #
+    #
+    # To use CGI scripts outside of ScriptAliased directories:
+    # (You will also need to add "ExecCGI" to the "Options" directive.)
+    #
+    #AddHandler cgi-script .cgi
+    # For type maps (negotiated resources):
+    #AddHandler type-map var
+    #
+    # Filters allow you to process content before it is sent to the client.
+    #
+    # To parse .shtml files for server-side includes (SSI):
+    # (You will also need to add "Includes" to the "Options" directive.)
+    #
+    AddType text/html .shtml
+    AddOutputFilter INCLUDES .shtml
+</IfModule>
+#
+#
+AddDefaultCharset UTF-8
+<IfModule mime_magic_module>
+    #
+    # The mod_mime_magic module allows the server to use various hints from the
+    # contents of the file itself to determine its type.  The MIMEMagicFile
+    # directive tells the module where the hint definitions are located.
+    #
+    MIMEMagicFile conf/magic
+</IfModule>
+#
+# Customizable error responses come in three flavors:
+# 1) plain text 2) local redirects 3) external redirects
+#
+# Some examples:
+#ErrorDocument 500 "The server made a boo boo."
+#ErrorDocument 404 /missing.html
+#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
+#ErrorDocument 402 http://www.example.com/subscription_info.html
+#
+#
+# Defaults if commented: EnableMMAP On, EnableSendfile Off
+#
+#EnableMMAP off
+EnableSendfile on
+# Enable HTTP/2 by default
+#
+# https://httpd.apache.org/docs/2.4/mod/core.html#protocols
+<IfModule mod_http2.c>
+    Protocols h2 h2c http/1.1
+</IfModule>
+# Supplemental configuration
+#
+# Load config files in the "/etc/httpd/conf.d" directory, if any.
+IncludeOptional conf.d/*.conf
+```
+何か設定ミスありますでしょうか？