nginx+tomcat+https负载均衡程序.docx

环境centos7：安装zlib库下载zlib源码上传zlib到服务器的/use/local/src解压，进入zlib目录 编译zlibtar -xf zlib-1.2.8.tar.gzcd zlib-1.2.8.tar.gz./configure --prefix=/usr/local/zlibmakemake install更新动态连接数据echo /usr/local/zlib/lib /etc/ld.so.conf?ldconfig -v查看cat /etc/ld.so.conf安装zlib-dev库yum install zlib-devel安装opensslCentOS 7.0默认安装的openssl为OpenSSL 1.0.1e-fips 11 Feb 2013，而此版本有漏洞需要升级!查看OpenSSL版本号openssl version从官网下载openssl源码包上传openssl到服务器/usr/local/src解压openssl切换到openssl目录下，编译OpenSSLtar -zxvf openssl-1.0.1p.tar.gcd ?openssl-1.0.1p./config shared zlib?make make install修改历史的OpenSSL文件设置备份mv /usr/bin/openssl /usr/bin/openssl.oldmv /usr/include/openssl /usr/include/openssl.old设置软连接使其使用新的OpenSSL版本 刚刚安装的OpenSSL默认安装在/usr/local/sslln -s /usr/local/ssl/bin/openssl /usr/bin/opensslln -s /usr/local/ssl/include/openssl /usr/include/openssl更新动态链接库数据echo /usr/local/ssl/lib /etc/ld.so.confldconfig -v查看版本openssl version安装apr插件安装aprtar zxvf apr-1.5.2.tar.gzcd apr-1.5.2./configure --prefix=/usr/local/apr?make?make install?安装apr-iconv?tar -zxvf apr-iconv-1.2.1.tar.gz?cd apr-iconv-1.2.1?./configure --prefix=/usr/local/apr-iconv --with-apr=/usr/local/apr?make?make install?安装apr-util?tar zxvf apr-util-1.5.4.tar.gzcd apr-util-1.5.4./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr --with-apr-iconv=/usr/local/apr-iconv/bin/apriconv?make?make install?安装tomcat-native?该文件在tomcat的bin下tar zxvf tomcat-native-1.1.20-src.tar.gz?cd tomcat-native-1.1.20-src/jni/native???./configure --with-apr=/usr/local/apr --with-java-home=/usr/jdk1.8.0_91 --with-ssl=/usr/local/sslmake?make install?添加环境变量?vi /etc/profile #在他文件末尾处添加下面的变量?# apr?export LD_LIBRARY_PATH=/usr/local/apr/lib?执行?source /etc/profile?此时环境变量生效果?使用openssl生成公钥私钥cd /usr/local/sslopenssl genrsa -des3 -out server.key 1024openssl req -new -key server.key -out server.csrcp server.key openssl rsa -in -out server.keyopenssl rsa -in server.key -out server.pemopenssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt注：生成密钥的密码为2016-techstar ,hostna