1
第一步：申请证书 —— “我要办个身份证”
2
1.你是一个网站运营者
3
👉需要申请一个“数字身份证”（也就是 SSL/TLS 证书）
4
2.先去登记机构报备
5
👉核实你的身份
6
3.生成 CSR（证书签名请求）
7
👉就是你“申请证书”的申请表
8
4.登记机构转交给 CA
9
👉确认你没问题后,就把你的CSR发给CA
10
# CA：证书颁发机构
11
5.CA颁发证书
12
👉里面包含
13
  ①CA的签名（证明这是真的）
14
  ②你的域名
15
  ③你的公钥
16
  ④证书有效期
17
  # 不是域名的
18
6.你拿到证书,部署到服务器
19
👉现在你的网站就“有身份证”了
20
=========================================
21
'CA 的签名 ≠ CA 的私钥'
22
✅签名 = CA私钥( hash(证书内容) )
23
浏览器怎么验证？？？
24
浏览器收到证书后：
25
1.从浏览器内置的可信 CA 列表中找到对应 CA 的公钥
26
2.用这个 CA 公钥去“解密”证书中的签名 → 得到一个哈希值 H1
27
3.同时,浏览器自己对证书内容（域名、公钥等）重新计算一次哈希 → 得到 H2
28
4.比较 H1 和 H2：
29
  如果一样 → 说明证书没被篡改,且确实是该 CA 签发的 ✅
30
  如果不一样 → 证书被伪造或损坏 ❌
31
🔍 注意：这里“解密签名”只是为了还原出原始哈希值,不是为了获取私钥！
32
# 私钥从未出现在网络上传输,也不可能被解出来
33
💡私钥用来“签”,公钥用来“验”；签名可验证,私钥永不露
34
=========================================
35
第二步：用户访问网站 —— “我怎么知道你是真的？”
36
1.浏览器请求证书
37
2.服务器发送证书
38
3.浏览器验证证书
39
  ①是不是由它信任的 CA 签发的
40
  ②再看证书有没有过期
41
  ③最重要的是：这个证书有没有被吊销？
42
=========================================
43
第三步：如何判断证书有没有被吊销？—— CRL vs OCSP
44
❌ 方法一：CRL（证书吊销列表）（黑名单）
45
👉 问题来了：名单太长了！又慢又耗流量
46
✅ 方法二：OCSP（在线证书状态协议）
47
👉 更快更省流量！但每次都要联网问一次,对 OCSP 服务器压力很大
48
=========================================
49
第四步：Nginx 的“聪明做法”—— OCSP Stapling（OCSP 缓存）
50
'既然 OCSP 查询这么频繁,能不能让服务器帮我们提前问好？'
51
⭐你可以在 Nginx 里开启一个开关：OCSP Stapling
52
⭐启动后,Nginx 会每隔一段时间主动去 OCSP 服务器问一次：“我的证书还有效吗？”
53
⭐OCSP 服务器回复：“有效,我给你一个临时凭证（OCSP Response）”
54
⭐Nginx 把这个“临时凭证”缓存起来
55
=========================================
56
当浏览器来访问时：
57
1.浏览器说：“请出示身份证！”
58
2.Nginx 不仅发证书,还附带一个 OCSP 响应：
59
  “你看,我已经问过了,我这个证书是有效的！”
60
3.浏览器一看：
61
  “哦,你已经帮我查好了,不用我再跑一趟 OCSP 服务器了”

1
'充当CA机构给自己颁发假证'
2

3
（1）创建存放证书的路径&生成自签证书&内容自定义填写
4
[root@web01 conf.d]# mkdir /etc/nginx/ssl_key
5
[root@web01 conf.d]# cd /etc/nginx/ssl_key
6
[root@web01 ssl_key]# openssl req  -x509 \
7
  -newkey rsa:2048 \
8
  -nodes \
9
  -keyout server.key \
10
  -out server.crt \
11
  -days 36500 \
12
  -subj "/C=CN/ST=Guangdong/L=Shenzhen/O=kpyun/OU=kpyun/CN=jiuzhao/emailAddress=123@qq.com"
13
===========================================
14
-x509 # 生成自签名证书（而非 CSR）
15
-newkey rsa:2048 # 生成一个新的 2048 位 RSA 私钥
16
-nodes # 私钥不加密（无密码）
17
-keyout server.key # 私钥输出文件
18
-out server.crt  # 证书输出文件
19
-days 36500  # 有效期 36500 天
20
-subj "..." # 指定证书主体信息
21
[root@web01 ssl_key]# ll
22
total 8
23
-rw-r--r-- 1 root root 1415 Mar 21 15:25 server.crt
24
-rw------- 1 root root 1700 Mar 21 15:25 server.key
25

26
（3）配置证书
27
[root@web01 ssl_key]# cd ../conf.d/
28
[root@web01 conf.d]# vim wp.conf
29
server {
30
    listen 443 ssl;
31
    # 443 ssl
32
    server_name wp.kpyun.com;
33
    root /code/wordpress;
34
    ssl_certificate ./ssl_key/server.crt;
35
    ssl_certificate_key ./ssl_key/server.key;
36
    # 指定证书和私钥的位置：/etc/nginx/ssl_key
37

38
    location / {
39
        index index.php index.html;
40
        }
41

42
    location ~ \.php$ {
43
        fastcgi_pass 127.0.0.1:9000;
44
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
45
        include fastcgi_params;
46
        }
47
}
48
[root@web01 conf.d]# nginx -t
49
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
50
nginx: configuration file /etc/nginx/nginx.conf test is successful
51
[root@web01 conf.d]# systemctl restart nginx
52
[root@web01 conf.d]# ss -lntup | grep nginx
53
tcp  LISTEN   0  128  0.0.0.0:80
54
tcp  LISTEN   0  128  0.0.0.0:443
55
# 80 & 443 监听两个端口！
56

57
浏览器访问：
58
https://wp.kpyun.com/
59
'不能直接访问wp.kpyun.com👉这个监听的端口是80'

1
❌️问题来了！
2
'每次都要输入https://...好麻烦！'
3

4
# 配置80跳转443
5
[root@web01 conf.d]# cat wp.conf
6
server {
7
    listen 80;
8
    server_name wp.kpyun.com;
9
    # rewrite ^(.*)$ https://$server_name$request_uri redirect;
10
    # 临时跳转,每次请求都要先请求源站
11
    # 配置将用户访问http请求临时跳转https
12
    return 302 https://$server_name$request_uri;
13
    # 尽量用return,直接返回,快一点！
14
    # 上面的更多的用做资源的跳转！
15

16
}
17
server {
18
    listen 443 ssl;
19
    server_name wp.kpyun.com;
20
    root /code/wordpress;
21
    ssl_certificate ./ssl_key/server.crt;
22
    ssl_certificate_key ./ssl_key/server.key;
23

24
    location / {
25
        index index.php index.html;
26
        }
27

28
    location ~ \.php$ {
29
        fastcgi_pass 127.0.0.1:9000;
30
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
31
        include fastcgi_params;
32
        }
33
}
34
[root@web01 conf.d]# nginx -t
35
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
36
nginx: configuration file /etc/nginx/nginx.conf test is successful
37
[root@web01 conf.d]# systemctl restart nginx
38

39
浏览器访问：
40
wp.kpyun.com
41
'直接跳转过去！'

1
lb01、web01、web02
2
三台都要配置https嘛？？？
3
'只需要lb01配置即可！'
4
# 后台的web服务器,和我们负载处于同一内网
5
# 负载与后台web使用http即可！
6

7
（1）将证书部署到负载均衡
8
[root@lb01 ~]# mkdir -p /etc/nginx/ssl_key
9
[root@lb01 ~]# cd /etc/nginx/ssl_key/
10
[root@lb01 ssl_key]# scp 10.0.0.7:/etc/nginx/ssl_key/* .
11
# 拷贝到当前目录
12
Authorized users only. All activities may be monitored and reported.
13
root@10.0.0.7's password: '
14
server.crt    100% 1415     1.6MB/s   00:00
15
server.key    100% 1700     1.4MB/s   00:00
16
[root@lb01 ssl_key]# ll
17
total 8
18
-rw-r--r-- 1 root root 1415 Mar 21 16:17 server.crt
19
-rw------- 1 root root 1700 Mar 21 16:17 server.key
20

21
（2）配置负载均衡
22
[root@lb01 ssl_key]# cd ../conf.d/
23
[root@lb01 conf.d]# vim wp.conf
24
[root@lb01 conf.d]# cat wp.conf
25
server {
26
    listen 80;
27
    server_name wp.kpyun.com;
28
    return 302 https://$server_name$request_uri;
29
    # 临时跳转,每次请求都要先请求源站
30
}
31
upstream web {
32
    server 172.16.1.7:80;
33
    server 172.16.1.8:80;
34
}
35
server {
36
    listen 443 ssl;
37
    server_name wp.kpyun.com;
38
    ssl_certificate ./ssl_key/server.crt;
39
    ssl_certificate_key ./ssl_key/server.key;
40
    include lb_env;
41
    # 负载的其他配置！
42

43
  location / {
44
  proxy_pass http://web;
45
  }
46
}
47
[root@lb01 conf.d]# vim ../lb_env
48
# 头部信息,来源IP...
49
  proxy_set_header Host $http_host;
50
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
51
  proxy_http_version 1.1;
52

53
  proxy_connect_timeout 30;
54
  proxy_send_timeout 60;
55
  proxy_read_timeout 60;
56

57
  proxy_buffering on;
58
  proxy_buffer_size 32k;
59
  proxy_buffers 4 128k;
60
[root@lb01 conf.d]# ll ../lb_env
61
-rw-r--r-- 1 root root 267 Mar 21 16:31 ../lb_env
62
[root@lb01 conf.d]# nginx -t
63
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
64
nginx: configuration file /etc/nginx/nginx.conf test is successful
65
[root@lb01 conf.d]# systemctl restart nginx
66

67
（3）配置fstcgi支持https的请求
68
'web01'
69
[root@web01 conf.d]# vim wp.conf
70
server {
71
    listen 80;
72
    server_name wp.kpyun.com;
73
    root /code/wordpress;
74

75
    location / {
76
        index index.php index.html;
77
        }
78

79
    location ~ \.php$ {
80
        fastcgi_pass 127.0.0.1:9000;
81
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
82
        include fastcgi_params;
83
        fastcgi_param HTTPS on;
84
        # 添加此参数
85
        }
86
}
87
[root@web01 conf.d]# nginx -t
88
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
89
nginx: configuration file /etc/nginx/nginx.conf test is successful
90
[root@web01 conf.d]# systemctl restart nginx
91

92
'web02'
93
[root@web02 conf.d]# vim wp.conf
94
# 同上
95
nginx -t
96
systemctl restart nginx
97

98
windows的hsots解析
99
10.0.0.5 wp.kpyun.com

1
🛠️ 准备工作：建立工作区
2
[root@Server ~]# pwd
3
/root
4
[root@Server ~]# mkdir -p /root/myca
5
[root@Server ~]# cd /root/myca
6
[root@Server myca]# mkdir private certs
7
# 创建专门的目录
8
  ✅️private:     # 存放私钥
9
  ✅️certs:    # 来存放各种证书
10
[root@Server myca]# chmod 700 private
11
# 更改私钥目录权限
12

13

14
1)生成“根证书” (Root CA)
15
[root@Server myca]# openssl genrsa -out private/rootCA.key 2048
16
# 生成根私钥
17
[root@Server myca]# openssl req -x509 -new -nodes -key private/rootCA.key -sha256 -days 3650 \
18
    -out certs/rootCA.crt \
19
    -subj "/C=CN/ST=Beijing/L=Beijing/O=MyRootCA/CN=MyRootCA"
20
[root@Server myca]# tree ./
21
./
22
├── certs
23
│   └── rootCA.crt
24
└── private
25
    └── rootCA.key
26
✅️ 现在是一个CA的证书,一个CA的私钥
27
📌 生成的 certs/rootCA.crt 就是我们以后要导入浏览器/系统的文件
28
# 导入它,浏览器就信任你了
29

30

31
2)生成“中间证书”
32
"这是那个“中间人”,用来给服务器证书签字的"
33
[root@Server myca]# openssl genrsa -out private/intermediate.key 2048
34
#  生成中间人的私钥
35
[root@Server myca]# openssl req -new -key private/intermediate.key -out intermediate.csr \
36
    -subj "/C=CN/ST=Beijing/L=Beijing/O=MyIntermediate/CN=MyIntermediate"
37
# 生成中间人的申请文件 (CSR)
38
[root@Server myca]# openssl x509 -req -in intermediate.csr -CA certs/rootCA.crt -CAkey private/rootCA.key -CAcreateserial \
39
    -out certs/intermediate.crt -days 1825 -sha256 \
40
    -extfile <(echo -e "basicConstraints=CA:TRUE\nkeyUsage=critical,keyCertSign,cRLSign")
41
# 用“根证书”给“中间人”盖章
42
Certificate request self-signature ok
43
subject=C=CN, ST=Beijing, L=Beijing, O=MyIntermediate, CN=MyIntermediate
44
[root@Server myca]# tree ./
45
./
46
├── certs
47
│   ├── intermediate.crt
48
│   ├── rootCA.crt
49
│   └── rootCA.srl
50
├── intermediate.csr
51
└── private
52
    ├── intermediate.key
53
    └── rootCA.key
54

55

56
3)生成“服务器证书”
57
# 创建扩展配置文件
58
# 为了支持域名,必须用配置文件,不能直接写在命令里
59
[root@Server myca]# cat > server.ext <<EOF
60
authorityKeyIdentifier=keyid,issuer
61
basicConstraints=CA:FALSE
62
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
63
extendedKeyUsage = serverAuth
64
subjectAltName = @alt_names
65

66
[alt_names]
67
DNS.1 = php.shihao.lab
68
IP.1 = 10.0.0.101
69
IP.2 = 127.0.0.1
70
EOF
71
[root@Server myca]# openssl genrsa -out private/server.key 2048
72
# 生成服务器私钥
73
[root@Server myca]# openssl req -new -key private/server.key -out server.csr \
74
    -subj "/C=CN/ST=Beijing/L=Beijing/O=MyServer/CN=php.shihao.lab"
75
# 生成请求文件
76
[root@Server myca]# openssl x509 -req -in server.csr -CA certs/intermediate.crt -CAkey private/intermediate.key -CAcreateserial \
77
    -out certs/server.crt -days 365 -sha256 -extfile server.ext
78
# 用“中间人”签发服务器证书
79
Certificate request self-signature ok
80
subject=C=CN, ST=Beijing, L=Beijing, O=MyServer, CN=php.shihao.lab
81

82

83
4)合并证书链
84
# Nginx 需要看到完整的链条（服务器证书 + 中间证书）
85
# 否则浏览器不知道中间人是谁
86
[root@Server myca]# cat certs/server.crt certs/intermediate.crt > certs/fullchain.crt
87
# 合并成一个 fullchain.crt
88
[root@Server myca]# tree $(pwd)
89
/root/myca
90
├── certs
91
│   ├── fullchain.crt
92
│   ├── intermediate.crt
93
│   ├── intermediate.srl
94
│   ├── rootCA.crt
95
│   ├── rootCA.srl
96
│   └── server.crt
97
├── intermediate.csr
98
├── private
99
│   ├── intermediate.key
100
│   ├── rootCA.key
101
│   └── server.key
102
├── server.csr
103
└── server.ext

1
[root@Server cert-authority]# cd -
2
/root
3

4
1)安装服务和插件
5
[root@Server ~]# yum -y install php php-bcmath php-cli php-common php-devel php-embedded php-fpm php-gd php-intl php-mbstring php-mysqlnd php-opcache php-pdo   php-process php-xml php-json
6
# 里面有一些插件
7

8
2)配置PHP服务&修改默认启动用户
9
[root@Server ~]# ll /etc/php.ini /etc/php-fpm.d/www.conf
10
-rw-r--r-- 1 root root 19491 Jan  8 08:00 /etc/php-fpm.d/www.conf
11
-rw-r--r-- 1 root root 62851 Jan  8 08:00 /etc/php.ini
12
'两个重要的配置文件'
13
[root@Server ~]# grep apache /etc/php-fpm.d/www.conf
14
user = apache
15
group = apache
16
# 我们统一用户为www
17
[root@Server ~]# groupadd -g666 www
18
[root@Server ~]# useradd -u666 -g666 -M -s /sbin/nologin www
19
[root@Server ~]# vim /etc/php-fpm.d/www.conf
20
user = www
21
group = www
22
listen = 127.0.0.1:9000
23

24
3)检测与启动
25
[root@Server ~]# php-fpm -t
26
[25-Apr-2026 15:53:04] NOTICE: configuration file /etc/php-fpm.conf test is successful
27
[root@Server ~]# systemctl enable --now php-fpm
28
Created symlink '/etc/systemd/system/multi-user.target.wants/php-fpm.service' → '/usr/lib/systemd/system/php-fpm.service'.
29
[root@Server ~]# netstat -lntup | grep php
30
tcp  0  0 127.0.0.1:9000  0.0.0.0:*   2455/php-fpm: maste

1
1)安装nginx
2
[root@Server ~]# vim /etc/yum.repos.d/nginx.repo
3
[nginx-stable]
4
name=nginx stable repo
5
baseurl=https://nginx.org/packages/centos/$releasever/$basearch/
6
gpgcheck=0
7
enabled=1
8
[root@Server ~]# yum -y install nginx
9
nginx stable repo    9.9 kB/s |  15 kB
10

11
2)修改主配置文件
12
[root@Server ~]# cd /etc/nginx/
13
[root@Server nginx]# ll
14
total 24
15
drwxr-xr-x 2 root root   46 Apr 25 16:03 conf.d
16
drwxr-xr-x 2 root root   22 Apr 25 15:42 default.d
17
-rw-r--r-- 1 root root 1007 Apr 14 08:00 fastcgi_params
18
.................
19
-rw-r--r-- 1 root root  644 Apr 14 08:00 nginx.conf
20
[root@Server nginx]# head -2 nginx.conf
21
user  nginx;
22
# 修改启动用户为www
23
[root@Server nginx]# vim nginx.conf
24
user  www;
25

26
3)创建子配置文件
27
'测试php联通性'
28
[root@Server nginx]# cd conf.d/
29
[root@Server conf.d]# rm -rf default.conf
30
[root@Server conf.d]# vim shihao.conf
31
server {
32
    listen 80;
33
    server_name php.shihao.lab;
34
    root /code;
35

36
    location / {
37
        index index.php index.html;
38
        }
39

40
    location ~ \.php$ {
41
        fastcgi_pass 127.0.0.1:9000;
42
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
43
        include fastcgi_params;
44
        }
45
}
46

47
4)创建必要信息&&重启服务器
48
[root@Server conf.d]# mkdir /code
49
[root@Server conf.d]# vim /code/info.php
50
<?php
51
        phpinfo();
52
?>
53
[root@Server conf.d]# chown -R www:www /code/
54
[root@Server conf.d]# systemctl restart nginx
55
[root@Server conf.d]# ss -lntup | grep 80
56
tcp   LISTEN 0      511          0.0.0.0:80        0.0.0.0:*    users:(("nginx",pid=2898,fd=6),("nginx",pid=2897,fd=6))
57

58
5)Windows主机映射
59
10.0.0.101  php.shihao.lab

1
[root@Server ~]# cd /server/tmp/
2
[root@Server tmp]# rz
3
[root@Server tmp]# ls mysql-8.0.36-1.el9.x86_64.rpm-bundle.tar
4
mysql-8.0.36-1.el9.x86_64.rpm-bundle.tar
5
[root@Server tmp]# tar -xf mysql-8.0.36-1.el9.x86_64.rpm-bundle.tar
6
[root@Server tmp]# dnf install -y \
7
> mysql-community-common-8.0.36-1.el9.x86_64.rpm \
8
> mysql-community-icu-data-files-8.0.36-1.el9.x86_64.rpm \
9
> mysql-community-libs-8.0.36-1.el9.x86_64.rpm \
10
> mysql-community-client-plugins-8.0.36-1.el9.x86_64.rpm \
11
> mysql-community-client-8.0.36-1.el9.x86_64.rpm \
12
> mysql-community-server-8.0.36-1.el9.x86_64.rpm \
13
> mysql-community-devel-8.0.36-1.el9.x86_64.rpm
14
[root@Server tmp]# rm -rf ./*
15
# 删除软件包
16

17
1)启动
18
[root@Server tmp]# cd
19
[root@Server ~]# systemctl enable --now mysqld
20
[root@Server ~]# cat /var/log/mysqld.log | grep root@local
21
2026-04-25T13:16:32.041957Z 6 [Note] [MY-010454] [Server] A temporary password is generated for root@localhost: k+eRPaf>88h&
22
[root@Server ~]# mysql -uroot -p'k+eRPaf>88h&'
23
"Welcome to the MySQL monitor."
24
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
25
mysql>
26

27
2)root用户基础配置
28
mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'Oldboy123.com';
29
mysql> SET GLOBAL validate_password.length = 6;
30
mysql> SET GLOBAL validate_password.policy = 0;
31
mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'passwd';
32

33
3)创建数据库和表
34
mysql> CREATE DATABASE php CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
35
mysql> SHOW DATABASES;
36
+--------------------+
37
| Database           |
38
+--------------------+
39
| information_schema |
40
| mysql              |
41
| performance_schema |
42
| php                |
43
| sys                |
44
+--------------------+
45
mysql> CREATE TABLE my_table (
46
    ->     id INT(2) NOT NULL AUTO_INCREMENT PRIMARY KEY,
47
    ->     name CHAR(25) NOT NULL,
48
    ->     age INT(3) NOT NULL
49
    -> );
50
mysql> SHOW TABLES;
51
+---------------+
52
| Tables_in_php |
53
+---------------+
54
| my_table      |
55
+---------------+
56
mysql> INSERT INTO my_table (name, age) VALUES ('zed', 52);
57
mysql> INSERT INTO my_table (name, age) VALUES ('yevont', 48);
58
mysql> SELECT * FROM my_table;
59
+----+--------+-----+
60
| id | name   | age |
61
+----+--------+-----+
62
|  1 | zed    |  52 |
63
|  2 | yevont |  48 |
64
+----+--------+-----+
65

66
4)专库专管
67
mysql> CREATE USER 'jiu'@'%' IDENTIFIED BY 'passwd';
68
mysql> SELECT user,host FROM mysql.user WHERE user='jiu';
69
+------+------+
70
| user | host |
71
+------+------+
72
| jiu  | %    |
73
+------+------+
74
mysql> GRANT ALL PRIVILEGES ON php.* TO 'jiu'@'%';
75
mysql> FLUSH PRIVILEGES;
76
mysql> exit
77
Bye
78
[root@Server ~]# vim /code/table_data.php

1
1)数据库准备
2
[root@Server ~]# mysql -uroot -ppasswd
3
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
4

5
mysql> CREATE DATABASE IF NOT EXISTS `quote` DEFAULT CHARACTER SET utf8mb4;
6
mysql> USE quote;
7
mysql> CREATE TABLE `quota` (
8
    ->     `ID` INT AUTO_INCREMENT PRIMARY KEY,
9
    ->     `QUOTE` TEXT NOT NULL,
10
    ->     `author` VARCHAR(100) NOT NULL
11
    -> ) ENGINE=InnoDB;
12
mysql> INSERT INTO `quota` (`QUOTE`, `author`) VALUES
13
    -> ('The only way to do great work is to love what you do.', 'Steve Jobs'),
14
    -> ('生活不止眼前的苟且,还有诗和远方。', '高晓松'),
15
    -> ('人生如逆旅,我亦是行人。', '苏轼'),
16
    -> ('In the middle of difficulty lies opportunity.','Albert Einstein'),
17
    -> ('天行健,君子以自强不息。', '《周易》'),
18
    -> ('Stay hungry, stay foolish.', 'Steve Jobs'),
19
    -> ('博观而约取,厚积而薄发。', '苏轼'),
20
    -> ('路漫漫其修远兮,吾将上下而求索。', '屈原'),
21
    -> ('海内存知己,天涯若比邻。', '王勃'),
22
    -> ('Do or do not. There is no try.', 'Yoda'),
23
    -> ('人固有一死,或重于泰山,或轻于鸿毛。', '司马迁'),
24
    -> ('不积跬步,无以至千里。', '荀子'),
25
    -> ('To be or not to be, that is the question.', 'William Shakespeare'),
26
    -> ('山重水复疑无路,柳暗花明又一村。', '陆游'),
27
    -> ('业精于勤,荒于嬉。', '韩愈'),
28
    -> ('Knowledge is power.', 'Francis Bacon'),
29
    -> ('长风破浪会有时,直挂云帆济沧海。', '李白'),
30
    -> ('学而不思则罔,思而不学则殆。', '孔子'),
31
    -> ('All that we see or seem is but a dream within a dream.', 'Edgar Allan Poe'),
32
    -> ('非淡泊无以明志,非宁静无以致远。', '诸葛亮');
33
mysql> GRANT ALL ON quote.* TO "jiu"@"%";
34
mysql> FLUSH PRIVILEGES;
35
mysql> exit
36
Bye
37

38
2)客户端准备应用
39
[root@Client ~]# mkdir -p /var/app/quote/templates
40
# 创建应用目录
41
"创建应用文件"
42
[root@Client ~]# vim /var/app/quote/app.py