Apache HTTP Server - Revision history

Kevin: /* Generate A Key for the CSR */

2013-07-29T10:24:59Z

Generate A Key for the CSR

← Older revision		Revision as of 10:24, 29 July 2013
Line 538:		Line 538:
	Verifying - Enter pass phrase for server.key:'''your confirm passphrase'''		Verifying - Enter pass phrase for server.key:'''your confirm passphrase'''

-		+	* '''Or use the following command to generate both key and csr files.'''
-	* Or use to generate both key and csr files.	+
	<pre>		<pre>
	$ openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr		$ openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr
Line 548:		Line 547:
	$ openssl rsa -noout -text -in server.key		$ openssl rsa -noout -text -in server.key
	</pre>		</pre>
-

	====Remove Passphrase from Key File====		====Remove Passphrase from Key File====

Kevin: /* Using SSL */

2013-07-29T09:41:41Z

Using SSL

← Older revision		Revision as of 09:41, 29 July 2013
Line 538:		Line 538:
	Verifying - Enter pass phrase for server.key:'''your confirm passphrase'''		Verifying - Enter pass phrase for server.key:'''your confirm passphrase'''

		+
		+	* Or use to generate both key and csr files.
		+	<pre>
		+	$ openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr
		+	</pre>

	-To See the details of the RSA private key.		-To See the details of the RSA private key.

Kevin at 02:24, 14 February 2013

2013-02-14T02:24:27Z

← Older revision		Revision as of 02:24, 14 February 2013
Line 1:		Line 1:
-	[[Category:Network]]	+	[[Category:Network]][[Category:Server]]

	==Apache HTTP Server==		==Apache HTTP Server==

Kevin at 17:28, 15 March 2012

2012-03-15T17:28:57Z

← Older revision		Revision as of 17:28, 15 March 2012
Line 529:		Line 529:
	-To generate the keys for the Certificate Signing Request (CSR) run the following command from a terminal prompt:		-To generate the keys for the Certificate Signing Request (CSR) run the following command from a terminal prompt:

-	$ openssl genrsa -des3 -out server.key ~~1024~~	+	$ openssl genrsa -des3 -out server.key 2048

-	Generating RSA private key, ~~1024~~ bit long modulus	+	Generating RSA private key, 2048 bit long modulus
	.......................++++++		.......................++++++
	.++++++		.++++++

Kevin at 13:32, 9 March 2010

2010-03-09T13:32:58Z

← Older revision		Revision as of 13:32, 9 March 2010
Line 94:		Line 94:

	CustomLog /var/log/apache2/access.log combined		CustomLog /var/log/apache2/access.log combined
-	ServerSignature On	+	'''ServerSignature Off'''

	Alias /doc/ "/usr/share/doc/"		Alias /doc/ "/usr/share/doc/"
Line 106:		Line 106:

	</VirtualHost>		</VirtualHost>
		+	'''ServerTokens Prod'''

	<div style="font-weight: bolder;">		<div style="font-weight: bolder;">
Line 161:		Line 162:

	CustomLog /var/log/apache2/access.log combined		CustomLog /var/log/apache2/access.log combined
-	ServerSignature On	+	'''ServerSignature Off'''

	Alias /doc/ "/usr/share/doc/"		Alias /doc/ "/usr/share/doc/"
Line 207:		Line 208:

	CustomLog /var/log/apache2/access.log combined		CustomLog /var/log/apache2/access.log combined
-	ServerSignature On	+	'''ServerSignature Off'''

	Alias /doc/ "/usr/share/doc/"		Alias /doc/ "/usr/share/doc/"
Line 235:		Line 236:
	ServerName blog.yoursite.com		ServerName blog.yoursite.com
	</VirtualHost>		</VirtualHost>
		+	'''ServerTokens Prod'''
	-<code>NameVirtualHost *:443</code> is not necessary if there is only one virtual host using 443 port.		-<code>NameVirtualHost *:443</code> is not necessary if there is only one virtual host using 443 port.

Line 272:		Line 274:

	CustomLog /var/log/apache2/access.log combined		CustomLog /var/log/apache2/access.log combined
		+	'''ServerSignature Off'''

	Alias /doc/ "/usr/share/doc/"		Alias /doc/ "/usr/share/doc/"
Line 283:		Line 286:

	</VirtualHost>		</VirtualHost>
-		+	'''ServerTokens Prod'''

	-Copy <code>default-ssl</code> to <code>mysite-ssl</code> and add the key file info.		-Copy <code>default-ssl</code> to <code>mysite-ssl</code> and add the key file info.
Line 319:		Line 322:

	CustomLog /var/log/apache2/ssl_access.log combined		CustomLog /var/log/apache2/ssl_access.log combined
		+	'''ServerSignature Off'''

	Alias /doc/ "/usr/share/doc/"		Alias /doc/ "/usr/share/doc/"

Kevin at 11:45, 10 April 2009

2009-04-10T11:45:45Z

← Older revision		Revision as of 11:45, 10 April 2009
Line 537:		Line 537:
	-To See the details of the RSA private key.		-To See the details of the RSA private key.
	<pre>		<pre>
-	$ openssl rsa -noout -text -in server.key	+	$ openssl rsa -noout -text -in server.key
	</pre>		</pre>

Line 545:		Line 545:
	-Make backup file first		-Make backup file first
	<pre>		<pre>
-	$ cp server.key server.key.original	+	$ cp server.key server.key.original
	</pre>		</pre>

	-Remove the encryption from the RSA private key.		-Remove the encryption from the RSA private key.
	<pre>		<pre>
-	$ openssl rsa -in server.key.original -out server.key	+	$ openssl rsa -in server.key.original -out server.key
	</pre>		</pre>

	-Make sure the server.key file is only readable by root:		-Make sure the server.key file is only readable by root:
	<pre>		<pre>
-	$ chmod 400 server.key	+	$ chmod 400 server.key
	</pre>		</pre>

Line 585:		Line 585:
	-To see the details of this CSR		-To see the details of this CSR
	<pre>		<pre>
-	$ openssl req -noout -text -in server.csr	+	$ openssl req -noout -text -in server.csr
	</pre>		</pre>

Line 600:		Line 600:
	-To see the details of this certificate		-To see the details of this certificate
	<pre>		<pre>
-	$ openssl x509 -noout -text -in server.crt	+	$ openssl x509 -noout -text -in server.crt
	</pre>		</pre>

Kevin at 10:30, 10 April 2009

2009-04-10T10:30:21Z

Show changes

Kevin at 06:09, 29 March 2009

2009-03-29T06:09:58Z

← Older revision		Revision as of 06:09, 29 March 2009
Line 359:		Line 359:
	$ sudo a2dissite default && sudo a2ensite mysite		$ sudo a2dissite default && sudo a2ensite mysite
	</pre>		</pre>
		+
		+
		+	-To check the virtual host setting
		+	<pre>
		+	$ apache2 -S
		+	</pre>
		+	-If it displays an error message like this
		+	<pre>
		+	apache2: bad user name ${APACHE_RUN_USER}
		+	</pre>
		+
		+	-Try this
		+	<pre>
		+	$ apache2ctl -S
		+	</pre>
		+

Kevin at 07:12, 4 March 2009

2009-03-04T07:12:57Z

Show changes

Kevin at 14:48, 7 November 2008

2008-11-07T14:48:15Z

← Older revision		Revision as of 14:48, 7 November 2008
Line 108:		Line 108:
	</VirtualHost>		</VirtualHost>
	</div>		</div>
		+
		+
		+	-Many virtual hosts with http & https,
		+	NameVirtualHost *:80
		+	NameVirtualHost *:443
		+	<VirtualHost *:443>
		+	ServerAdmin kevin@yoursite.com
		+
		+	SSLEngine on
		+
		+	SSLOptions +StrictRequire
		+
		+	SSLCertificateFile /etc/ssl/certs/server.crt
		+	SSLCertificateKeyFile /etc/ssl/private/server.key
		+
		+	DocumentRoot /var/www/
		+	ServerName yoursite.com
		+	<Directory />
		+	Options FollowSymLinks
		+	AllowOverride None
		+	</Directory>
		+	<Directory /var/www/>
		+	Options Indexes FollowSymLinks MultiViews
		+	AllowOverride None
		+	Order allow,deny
		+	allow from all
		+	</Directory>
		+
		+	ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
		+	<Directory "/usr/lib/cgi-bin">
		+	AllowOverride None
		+	Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
		+	Order allow,deny
		+	Allow from all
		+	</Directory>
		+
		+	ErrorLog /var/log/apache2/error.log
		+
		+	# Possible values include: debug, info, notice, warn, error, crit,
		+	# alert, emerg.
		+	LogLevel warn
		+
		+	CustomLog /var/log/apache2/access.log combined
		+	ServerSignature On
		+
		+	Alias /doc/ "/usr/share/doc/"
		+	<Directory "/usr/share/doc/">
		+	Options Indexes MultiViews FollowSymLinks
		+	AllowOverride None
		+	Order deny,allow
		+	Deny from all
		+	Allow from 127.0.0.0/255.0.0.0 ::1/128
		+	</Directory>
		+
		+	</VirtualHost>
		+
		+
		+	<VirtualHost *:80>
		+	ServerAdmin kevin@yoursite.com
		+
		+	DocumentRoot /var/www/
		+	ServerName yoursite.com
		+	<Directory />
		+	Options FollowSymLinks
		+	AllowOverride None
		+	</Directory>
		+	<Directory /var/www/>
		+	Options Indexes FollowSymLinks MultiViews
		+	AllowOverride None
		+	Order allow,deny
		+	allow from all
		+	</Directory>
		+
		+	ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
		+	<Directory "/usr/lib/cgi-bin">
		+	AllowOverride None
		+	Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
		+	Order allow,deny
		+	Allow from all
		+	</Directory>
		+
		+	ErrorLog /var/log/apache2/error.log
		+
		+	# Possible values include: debug, info, notice, warn, error, crit,
		+	# alert, emerg.
		+	LogLevel warn
		+
		+	CustomLog /var/log/apache2/access.log combined
		+	ServerSignature On
		+
		+	Alias /doc/ "/usr/share/doc/"
		+	<Directory "/usr/share/doc/">
		+	Options Indexes MultiViews FollowSymLinks
		+	AllowOverride None
		+	Order deny,allow
		+	Deny from all
		+	Allow from 127.0.0.0/255.0.0.0 ::1/128
		+	</Directory>
		+
		+	</VirtualHost>
		+
		+	#<VirtualHost *:80>
		+	# ServerAdmin kevin@yoursite.com
		+	#
		+	# DocumentRoot /home/kevin/public_html
		+	# ServerName kevin.yoursite.com
		+	# ErrorLog /home/kevin/logs/error_log
		+	# TransferLog /home/kevin/logs/access_log
		+	#</VirtualHost>
		+
		+	<VirtualHost *:80>
		+	ServerAdmin kevin@yoursite.com
		+
		+	DocumentRoot /var/www/blog
		+	ServerName blog.yoursite.com
		+	</VirtualHost>
		+	-<code>NameVirtualHost *:443</code> is not necessary if there is only one virtual host using 443 port.
		+