＃ nmcli general hostname <変更するhostname>
# systemctl restart systemd-hostnamed

# systemctl stop firewalld
# systemctl disable firewalld

# vi /etc/selinux/config

#SELINUX=enforcing
SELINUX=disabled

# localectl set-locale LANG=ja_JP.utf8

# reboot

# yum install -y httpd
# systemctl start httpd
# systemctl enable httpd

# yum -y install php php-mbstring
# vi /etc/php.ini

;;;;;;;;;;;;;;;;;;;;;;
; Dynamic Extensions ;
;;;;;;;;;;;;;;;;;;;;;;
extention=mbstring.so  #追記

# yum -y install php-xml
# systemctl restart httpd

# vi /var/www/html/phpinfo.php

<?php
    phpinfo();
?>

# yum -y install wget

# cd /var/www
# wget https://simplesamlphp.org/download?latest

# tar xvf download?latest

# mv simplesamlphp-1.XX.XX simplesaml

# yum -y install mod_ssl

# cd /etc/pki/tls/private/
# openssl genrsa -aes128 1024 > server.key

Generating RSA private key, 1024 bit long modulus
..................++++++
..........................................++++++
e is 65537 (0x10001)
Enter pass phrase:（パスフレーズ）
Verifying - Enter pass phrase:（同じパスフレーズ）

# cd /etc/pki/tls/private/
# openssl req -new -key server.key > server.csr

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Tokyo
Locality Name (eg, city) []:空白
Organization Name (eg, company) [Internet Widgits Pty Ltd]:空白
Organizational Unit Name (eg, section) []:空白
Common Name (eg, YOUR name) []:設定したhostname
Email Address []:空白

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:空白
An optional company name []:空白

# cd /etc/pki/tls/private/
# openssl x509 -in server.csr -days 36500 -req -signkey server.key > /etc/pki/tls/private/server.crt

Signature ok
subject=/C=JP/ST=Tokyo/L=Hoge/O=Hoge Ltd/OU=Hoge/CN=sp.local
Getting Private key
Enter pass phrase for server.key:（上記で指定したパスフレーズ）

# mv server.key server.key.bak
# openssl rsa -in server.key.bak > server.key

Enter pass phrase for server.key.back:（パスフレーズ）
writing RSA key

# vi /etc/httpd/conf.d/ssl.conf

Listen 443 https

(中略)

<VirtualHost _default_:443>
SetEnv SIMPLESAMLPHP_CONFIG_DIR /var/www/simplesaml/config # 追記

# General setup for the virtual host, inherited from global configuration
DocumentRoot "/var/www/simplesaml/www" # 編集

Alias /simplesaml "/var/www/simplesaml/www" # 追記

ServerName <設定したhostname>:443 # 編集

(中略)

#   SSL Protocol support:
# List the enable protocol levels with which clients will be able to
# connect.  Disable SSLv2 access by default:
SSLProtocol -all +TLSv1.2　# 編集

(中略)

#   Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate.  If
# the certificate is encrypted, then you will be prompted for a
# pass phrase.  Note that a kill -HUP will prompt again.  A new
# certificate can be generated using the genkey(1) command.
SSLCertificateFile /etc/pki/tls/private/server.crt # 編集

#   Server Private Key:
#   If the key is not combined with the certificate, use this
#   directive to point at the key file.  Keep in mind that if
#   you've both a RSA and a DSA private key you can configure
#   both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile /etc/pki/tls/private/server.key

(中略)

# 最後に追記
<Directory /var/www/simplesaml/www>
    <IfModule mod_authz_core.c>
        Require all granted
    </IfModule>
</Directory>
</VirtualHost>

# systemctl restart httpd

# vi /etc/httpd/conf/httpd.conf

(設定ファイルの末尾に以下を追記)

Alias /simplesaml /var/www/simplesaml/www
<Directory /var/www/simplesaml/www>
    <IfModule mod_authz_core.c>
        Require all granted
    </IfModule>
</Directory>