被忽略的虚拟主机

Question

我的配置忽略了downloads.example.net。我将其创建为现有主机的附加虚拟主机，用于文件下载。创建一个文件夹，设置权限，设置两个虚拟主机，一个用于HTTP重写为HTTPS，另一个用于HTTPS。已经有了一个虚拟主机来服务于打IP的人，我不想让他们看到任何东西，所以服务上的IP空白页，没有奖励直接来。有一个WordPress网站在几个域上提供服务，相同的设置，重写为HTTPS。

打开IP并在/var/www/html上获取空白index.html。来吧，www.example.net，www.example.info，example.net和example.info，并获得WordPress网站。在HTTP或HTTPS上使用downloads.example.net来获取WordPress网站。我通常不会在虚拟主机上有多个域，也不会使用重写将人们移到SSL，所以我想知道我是不是在这方面出了问题。

SSL证书在站点之间共享，因为CloudFlare将自己的证书添加到访问该站点的用户。

<VirtualHost *:80>
    ServerName 111.222.233.244
    ServerAdmin support@localhost
    DocumentRoot /var/www/html

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

<VirtualHost *:80>
    ServerName downloads.example.net
    ServerAlias downloads.example.info
    ServerAdmin support@example.net
    DocumentRoot /var/www/downloads

    ErrorLog ${APACHE_LOG_DIR}/downloaderror.log
    CustomLog ${APACHE_LOG_DIR}/downloadaccess.log combined
</VirtualHost>

<VirtualHost *:80>
    ServerName www.example.net
    ServerAlias example.net
    ServerAlias www.example.info
    ServerAlias example.info
    ServerAdmin support@example.net
    DocumentRoot /var/www/wordpress

    ErrorLog ${APACHE_LOG_DIR}/exampleerror.log
    CustomLog ${APACHE_LOG_DIR}/exampleaccess.log combined
</VirtualHost>

<IfModule mod_ssl.c>
  <VirtualHost *:443>
    ServerName 111.222.233.244
    ServerAdmin support@localhost
    DocumentRoot /var/www/html

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    SSLEngine on
    SSLCertificateFile /etc/apache2/ssl/example.crt
    SSLCertificateKeyFile /etc/apache2/ssl/example.key

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
                    SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
                    SSLOptions +StdEnvVars
    </Directory>
    BrowserMatch "MSIE [2-6]" \
                    nokeepalive ssl-unclean-shutdown \
                    downgrade-1.0 force-response-1.0
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  </VirtualHost>

  <VirtualHost *:443>
    ServerName downloads.example.net
    ServerAlias downloads.example.info
    ServerAdmin support@example.net
    DocumentRoot /var/www/downloads

    ErrorLog ${APACHE_LOG_DIR}/downloaderror.log
    CustomLog ${APACHE_LOG_DIR}/downloadaccess.log combined

    SSLEngine on
    SSLCertificateFile /etc/apache2/ssl/example.crt
    SSLCertificateKeyFile /etc/apache2/ssl/example.key

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
                    SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
                    SSLOptions +StdEnvVars
    </Directory>

    BrowserMatch "MSIE [2-6]" \
                    nokeepalive ssl-unclean-shutdown \
                    downgrade-1.0 force-response-1.0
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  </VirtualHost>

  <VirtualHost *:443>
    ServerName www.example.net
    ServerAlias example.net
    ServerAlias www.example.info
    ServerAlias example.info
    ServerAdmin support@example.net
    DocumentRoot /var/www/wordpress

    ErrorLog ${APACHE_LOG_DIR}/exampleerror.log
    CustomLog ${APACHE_LOG_DIR}/exampleaccess.log combined

    SSLEngine on
    SSLCertificateFile /etc/apache2/ssl/example.crt
    SSLCertificateKeyFile /etc/apache2/ssl/example.key

    <FilesMatch "\.(cgi|shtml|phtml|php)$">
                    SSLOptions +StdEnvVars
    </FilesMatch>
    <Directory /usr/lib/cgi-bin>
                    SSLOptions +StdEnvVars
    </Directory>

    BrowserMatch "MSIE [2-6]" \
                    nokeepalive ssl-unclean-shutdown \
                    downgrade-1.0 force-response-1.0
    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  </VirtualHost>
</IfModule>

编辑：

第一个建议将IP添加到第一个指令没有任何作用，第一个不是被服务的那个，而是其中包含域名的那个。第二个和第三个评论有一个指向“副本”的链接，该页面上的建议如下所示。

apache2ctl -t
Syntax OK

apache2ctl -S
VirtualHost configuration:
*:80                   is a NameVirtualHost
     default server 111.222.233.244 (/etc/apache2/sites-enabled/000-default.conf:1)
     port 80 namevhost 111.222.233.244 (/etc/apache2/sites-enabled/000-default.conf:1)
     port 80 namevhost downloads.example.net (/etc/apache2/sites-enabled/000-default.conf:10)
             alias downloads.example.info
     port 80 namevhost www.example.net (/etc/apache2/sites-enabled/000-default.conf:25)
             alias example.net
             alias www.example.info
             alias example.info
*:443                  is a NameVirtualHost
     default server 111.222.233.244 (/etc/apache2/sites-enabled/000-default.conf:43)
     port 443 namevhost 111.222.233.244 (/etc/apache2/sites-enabled/000-default.conf:43)
     port 443 namevhost downloads.example.net (/etc/apache2/sites-enabled/000-default.conf:67)
             alias downloads.example.info
     port 443 namevhost www.example.net (/etc/apache2/sites-enabled/000-default.conf:93)
             alias example.net
             alias www.example.info
             alias example.info
ServerRoot: "/etc/apache2"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/var/log/apache2/error.log"
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
Mutex ssl-stapling: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/var/lock/apache2" mechanism=fcntl
Mutex mpm-accept: using_defaults
Mutex watchdog-callback: using_defaults
PidFile: "/var/run/apache2/apache2.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="www-data" id=33
Group: name="www-data" id=33

禁用SSL并尝试使用仅有两台主机的端口80，但下载内容仍会发送到example.net。

<VirtualHost *:80>        
    ServerName downloads.example.net
    ServerAdmin support@example.net
    DocumentRoot /var/www/html

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

<VirtualHost *:80>
    ServerName example.net
    ServerAlias www.example.net
    ServerAdmin support@example.net
    DocumentRoot /var/www/wordpress

    ErrorLog ${APACHE_LOG_DIR}/ufoerror.log
    CustomLog ${APACHE_LOG_DIR}/ufoaccess.log combined
</VirtualHost>

Answer 1

尝试在调试模式下使用-X标志运行apache，然后运行您的请求以查看发生了什么。

还有increase the loglevel。