DVD를 그대로 특정 디렉토리에 복사 후 apache2에 아래 사이트를 추가 (/etc/apache2/sites-available/rhel-https_repo.conf)
<IfModule mod_ssl.c> SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES SSLHonorCipherOrder on SSLProtocol all -SSLv3 SSLProxyProtocol all -SSLv3 SSLPassPhraseDialog builtin SSLSessionCache "shmcb:/var/log/apache2/ssl_scache(512000)" SSLSessionCacheTimeout 300 <VirtualHost _default_:6931> DocumentRoot "/mnt/share@nas.esvali.com/rhel-8.10-x86_64-dvd" ServerName localhost:6931 ServerAdmin "root@localhost" ErrorLog "${APACHE_LOG_DIR}/rhel-https_error.log" TransferLog "${APACHE_LOG_DIR}/rhel-https_access.log" Timeout 300 <Directory "/mnt/share@nas.esvali.com/rhel-8.10-x86_64-dvd"> Options Indexes FollowSymLinks MultiViews ExecCGI IndexOptions NameWidth=* AllowOverride FileInfo AuthConfig Limit Order Deny,Allow Allow from all Require all granted </Directory> SSLEngine on SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> <Directory "/mnt/share@nas.esvali.com/rhel-8.10-x86_64-dvd/cgi-bin"> SSLOptions +StdEnvVars </Directory> BrowserMatch "MSIE [2-5]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 CustomLog "/var/log/apache2/ssl_request.log" \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" </VirtualHost> </IfModule>
RHEL이 설치되어 있는 서버에 아래를 복사 (/etc/yum.repos.d/10.10.10.1.repo)
############################################################ # # 이 yum 레포지터리는 RHEL이 yum을 사용할 수 없어서 # DVD를 웹서버에 복사 후 사설 레포지터리를 만들어 사용한다. # # echo "sslverify=false" >> /etc/yum.conf # cp -fv 10.10.10.1.repo /etc/yum.repos.d/ # yum clean all # yum repolist # ############################################################ [DVD-rhel-BaseOS] name=Red Hat Enterprise Linux $releasever - $basearch - BaseOS baseurl=https://10.10.10.1:6931/BaseOS/ gpgcheck=0 Enabled=1 [DVD-rhel-AppStream] name=Red Hat Enterprise Linux $releasever - $basearch - AppStream baseurl=https://10.10.10.1:6931/AppStream/ gpgcheck=0 Enabled=1