nginx+tomcat+https负载均衡范例.docx

环境centos7： 安装zlib库 1.下载zlib源码 2.上传zlib到服务器的/use/local/src 3.解压，进入zlib目录 编译zlib tar -xf zlib-1.2.8.tar.gz cd zlib-1.2.8.tar.gz ./configure --prefix=/usr/local/zlib make make install 4.更新动态连接数据 echo /usr/local/zlib/lib /etc/ld.so.conf? ldconfig -v 5.查看 cat /etc/ld.so.conf 安装zlib-dev库 yum install zlib-devel 安装openssl CentOS 7.0默认安装的openssl为OpenSSL 1.0.1e-fips 11 Feb 2013，而此版本有漏洞需要升级! 1.查看OpenSSL版本号 openssl version 2.从官网下载openssl源码包 3.上传openssl到服务器/usr/local/src 4.解压openssl 切换到openssl目录下，编译OpenSSL tar -zxvf openssl-1.0.1p.tar.g cd ?openssl-1.0.1p ./config shared zlib? make make install 5.修改历史的OpenSSL文件设置备份 mv /usr/bin/openssl /usr/bin/openssl.old mv /usr/include/openssl /usr/include/openssl.old 6.设置软连接使其使用新的OpenSSL版本 刚刚安装的OpenSSL默认安装在/usr/local/ssl ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl ln -s /usr/local/ssl/include/openssl /usr/include/openssl 7.更新动态链接库数据 echo /usr/local/ssl/lib /etc/ld.so.conf ldconfig -v 8.查看版本 openssl version 安装apr插件 1.安装apr tar zxvf apr-1.5.2.tar.gz cd apr-1.5.2 ./configure --prefix=/usr/local/apr? make? make install? 2.安装apr-iconv? tar -zxvf apr-iconv-1.2.1.tar.gz? cd apr-iconv-1.2.1? ./configure --prefix=/usr/local/apr-iconv --with-apr=/usr/local/apr? make? make install? 3.安装apr-util? tar zxvf apr-util-1.5.4.tar.gz cd apr-util-1.5.4 ./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr --with-apr-iconv=/usr/local/apr-iconv/bin/apriconv? make? make install? 4.安装tomcat-native? 该文件在tomcat的bin下 tar zxvf tomcat-native-1.1.20-src.tar.gz? cd tomcat-native-1.1.20-src/jni/native??? ./configure --with-apr=/usr/local/apr --with-java-home=/usr/jdk1.8.0_91 --with-ssl=/usr/local/ssl make? make install? 5.添加环境变量? vi /etc/profile #在他文件末尾处添加下面的变量? # apr? export LD_LIBRARY_PATH=/usr/local/apr/lib? 执行? source /etc/profile? 此时环境变量生效果? 使用openssl生成公钥私钥 cd /usr/local/ssl openssl genrsa -des3 -out server.key 1024 openssl req -new -key server.key -out server.csr cp server.key openssl rsa -in -out server.key openssl rsa -i