https://skillset.wiki/index.php?action=history&feed=atom&title=Web%E3%82%B5%E3%83%BC%E3%83%90%E6%A9%9F%E8%83%BD%E3%81%AE%E8%BF%BD%E5%8A%A0 2026-05-04T21:22:13Z このウィキのこのページに関する変更履歴 MediaWiki 1.42.5 https://skillset.wiki/index.php?title=Web%E3%82%B5%E3%83%BC%E3%83%90%E6%A9%9F%E8%83%BD%E3%81%AE%E8%BF%BD%E5%8A%A0&diff=760&oldid=prev 2019-02-22T03:25:39Z

<p>ページの作成:「==Debian系== # apt install apache2 # apachectl -M | grep ssl # a2enmod ssl # apt-get install software-properties-common # add-apt-repository ppa:ondrej/php # apt-g…」</p> <p><b>新規ページ</b></p><div>==Debian系==<br /> # apt install apache2<br /> # apachectl -M | grep ssl<br /> # a2enmod ssl<br /> # apt-get install software-properties-common<br /> # add-apt-repository ppa:ondrej/php<br /> # apt-get update<br /> # apt install php7.2 php7.2-mbstring php7.2-mysql php7.2-xml php7.2-gd php7.2-zipphp<br /> # apt install mariadb-server ← [https://downloads.mariadb.org/mariadb/repositories/#mirror=yamagata-university MariaDB公式repo]<br /> # systemctl start apache2 mysql<br /> <br /> Debian系は ufw だけでなく、iptablesルールも確認する必要がある。<br /> <br /> # vi /etc/iptables/iptables.rules<br /> <br /> -A INPUT -p tcp --dport 80 -j ACCEPT<br /> -A INPUT -p tcp --dport 443 -j ACCEPT<br /> <br /> # /sbin/iptables-restore &lt; /etc/iptables/iptables.rules<br /> # service apache2 restart<br /> <br /> ==RH系==<br /> # yum install httpd mod_ssl<br /> # yum install http://rpms.famillecollet.com/enterprise/remi-release-7.rpm<br /> # yum install --enablerepo=remi,remi-php72 php php-mysql php-mbstring php-gd php-xml<br /> # yum install mariadb-server # MariaDB公式repo<br /> # systemctl start httpd mariadb<br /> # firewall-cmd --add-service=http,https<br /> # yum install certbot<br /> # certbot certonly<br /> # vim /etc/httpd/conf.d/ssl.conf<br /> <br /> Apache 2.4.7以前の場合<br /> SSLCertificateFile /etc/letsencrypt/live/example.com/cert.pem<br /> SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br /> SSLCertificateChainFile /etc/letsencrypt/live/example.com/chain.pem<br /> <br /> Apache 2.4.7以降の場合<br /> SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem<br /> SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem<br /> <br /> # firewall-cmd --remove-service=http<br /> # openssl x509 -in /etc/letsencrypt/live/example.com/cert.pem -noout -dates ← expired date<br /> # crontab -e<br /> <br /> ===SSL接続を評価 A+===<br /> # vim /etc/httpd/conf.d/ssl.conf<br /> <br /> Header set Strict-Transport-Security &quot;max-age=315360000;&quot; ← https接続を強制（HSTS）<br /> SSLProtocol all -TLSv1 -TLSv1.1 -SSLv2 -SSLv3<br /> SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5!RC4!3DES!IDEA</div>

Y