What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE
What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE
What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
<strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />
Back to <str<strong>on</strong>g>the</str<strong>on</strong>g> Basics:<br />
<str<strong>on</strong>g>What</str<strong>on</strong>g> <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
(<str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g>) <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
<strong>on</strong> <strong>HP</strong>-<strong>UX</strong> <strong>and</strong> <str<strong>on</strong>g>What</str<strong>on</strong>g><br />
to Do with it<br />
Michael Slavich<br />
Hewlett-Packard<br />
michael_slavich@hp.com<br />
I<br />
Page 1
<strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Based<br />
<str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
I<br />
Page 2
Goals <strong>and</strong> Objectives<br />
• Overview of <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> <strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />
• An introducti<strong>on</strong> into <str<strong>on</strong>g>the</str<strong>on</strong>g> positi<strong>on</strong>ing <strong>and</strong> architecture<br />
• A comprehensive view of <str<strong>on</strong>g>the</str<strong>on</strong>g> features <strong>and</strong> functi<strong>on</strong>ality<br />
• A walkthrough of <str<strong>on</strong>g>the</str<strong>on</strong>g> steps involved in installati<strong>on</strong> <strong>and</strong><br />
c<strong>on</strong>figurati<strong>on</strong><br />
• A look at <str<strong>on</strong>g>the</str<strong>on</strong>g> webmin admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> interface<br />
• Where to go for more informati<strong>on</strong><br />
michael_slavich@ hp.com<br />
Page 3
Topics<br />
• <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based web server<br />
• Introducti<strong>on</strong> to <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Architecture<br />
• Third-party modules<br />
• Java soluti<strong>on</strong>s<br />
• Security soluti<strong>on</strong>s<br />
• Installati<strong>on</strong> <strong>and</strong> C<strong>on</strong>figurati<strong>on</strong><br />
• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min Admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> Tools<br />
michael_slavich@ hp.com<br />
Page 4
<strong>HP</strong>-<strong>UX</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g><str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
In Perspective<br />
Vendor-specific<br />
Development &<br />
Deployment<br />
tools<br />
JDK, Compilers,<br />
Linkers, debuggers<br />
& o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />
Development<br />
tools<br />
System &<br />
Network<br />
Management<br />
tools<br />
<str<strong>on</strong>g>Web</str<strong>on</strong>g>/Enterpr<str<strong>on</strong>g>is</str<strong>on</strong>g>e applicati<strong>on</strong>s<br />
CRM/B2B <str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />
Tom cat/W eb<br />
plugins<br />
Database layer<br />
Applicati<strong>on</strong><br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />
Java Virtual<br />
Machine<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
System & Network services<br />
<strong>HP</strong>-<strong>UX</strong> Operating System<br />
Soluti<strong>on</strong>s<br />
For Medium/Large<br />
Enterpr<str<strong>on</strong>g>is</str<strong>on</strong>g>e customers, XSPs<br />
Financial, e-Commerce<br />
E-Services, Supply Chain<br />
Etc.<br />
Soluti<strong>on</strong>s<br />
For Small/medium<br />
Customers: XSPs,<br />
Individuals,<br />
developers, n<strong>on</strong>-profit,<br />
Educati<strong>on</strong> etc.<br />
michael_slavich@ hp.com<br />
Page 5
Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
• Most popular web server in <str<strong>on</strong>g>the</str<strong>on</strong>g> market<br />
• Easy extensibility<br />
• Open source advantage<br />
• Most popular security soluti<strong>on</strong> - mod_ssl, openSSL &<br />
RSA Crypto-C libraries<br />
• Efficient <strong>and</strong> high-performance cryptographic libraries<br />
from RSA Security Co.<br />
michael_slavich@ hp.com<br />
Page 6
Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
(c<strong>on</strong>’t)<br />
• Java Servlet/JSP extensibility with Tomcat<br />
• Easy migrati<strong>on</strong> of proprietary modules to <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g><br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
• Integrati<strong>on</strong> with o<str<strong>on</strong>g>the</str<strong>on</strong>g>r <strong>HP</strong> products like Virtual Vault,<br />
<str<strong>on</strong>g>Web</str<strong>on</strong>g>QoS etc.,<br />
• LDAP, P<strong>HP</strong>, Fr<strong>on</strong>t page extensi<strong>on</strong> <strong>and</strong> XML<br />
capabilities in <str<strong>on</strong>g>the</str<strong>on</strong>g> roadmap<br />
michael_slavich@ hp.com<br />
Page 7
Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
(c<strong>on</strong>’t)<br />
• IPv6 support<br />
• <str<strong>on</strong>g>Web</str<strong>on</strong>g>-based graphical user interface for easy<br />
admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> & c<strong>on</strong>figurati<strong>on</strong><br />
• Efficient access c<strong>on</strong>trol (not present in iPlanet)<br />
• Load balancing am<strong>on</strong>g clusters (through<br />
mod_backh<strong>and</strong> in our roadmap)<br />
michael_slavich@ hp.com<br />
Page 8
Why <str<strong>on</strong>g>Apache</str<strong>on</strong>g>?<br />
• Open source software - FREE<br />
• www.apache.org<br />
• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>is</str<strong>on</strong>g> a HTTP 1.0/1.1 compliant web server<br />
• <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> server : http://software.hp.com (under<br />
Internet & Security soluti<strong>on</strong>s)<br />
• Most popular web server in <str<strong>on</strong>g>the</str<strong>on</strong>g> market …<br />
michael_slavich@ hp.com<br />
Page 9
Market-leadership:<br />
<str<strong>on</strong>g>Web</str<strong>on</strong>g>-server deployment stat<str<strong>on</strong>g>is</str<strong>on</strong>g>tics<br />
michael_slavich@ hp.com<br />
Page 10
C<strong>on</strong>tent Thru’ <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
• Static – html, images etc<br />
• Dynamic – server-side programming<br />
! CGI, FastCGI<br />
! Java Servlets/JSPs<br />
! <str<strong>on</strong>g>Server</str<strong>on</strong>g> Side Includes<br />
! Embedded interpreters – mod_perl, P<strong>HP</strong><br />
michael_slavich@ hp.com<br />
Page 11
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Architecture<br />
Static modules DSO modules mod_jserv<br />
openSSL<br />
mod_perl<br />
mod_so<br />
mod_ssl<br />
mod_php<br />
perl<br />
mod_core<br />
…<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />
HTTP 1.0/1.1<br />
Tomcat<br />
michael_slavich@ hp.com<br />
Page 12
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> C<strong>on</strong>ceptual View<br />
michael_slavich@ hp.com<br />
Page 13
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> Life Cycle<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g> startup<br />
And<br />
C<strong>on</strong>figurati<strong>on</strong><br />
Module initializati<strong>on</strong><br />
fork fork fork<br />
Child initializati<strong>on</strong><br />
Child initializati<strong>on</strong><br />
Child initializati<strong>on</strong><br />
Request<br />
Loop<br />
Request<br />
Loop<br />
Request<br />
Loop<br />
Child exit Child exit Child exit<br />
michael_slavich@ hp.com<br />
Page 14
HTTP Request <strong>and</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Request Loop<br />
Request method URI of <str<strong>on</strong>g>the</str<strong>on</strong>g> document to be retrieved Protocol Versi<strong>on</strong><br />
michael_slavich@ hp.com<br />
Page 15
Request/Resp<strong>on</strong>se Phases<br />
• URI Translati<strong>on</strong> Phase<br />
" Alias, ScriptAlias, DocumentRoot<br />
• Access c<strong>on</strong>trol Phase<br />
Request informati<strong>on</strong> <str<strong>on</strong>g>is</str<strong>on</strong>g> stored under<br />
struct request_rec<br />
" Where <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> request coming from?<br />
• Au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong> Phase<br />
" Who <str<strong>on</strong>g>is</str<strong>on</strong>g> it coming from?<br />
• Authorizati<strong>on</strong> Phase<br />
" Who <str<strong>on</strong>g>is</str<strong>on</strong>g> allowed to perform th<str<strong>on</strong>g>is</str<strong>on</strong>g> particular request?<br />
• MIME type checking phase<br />
" depends <strong>on</strong> file name, extensi<strong>on</strong> or document root<br />
" chooses <str<strong>on</strong>g>the</str<strong>on</strong>g> c<strong>on</strong>tent h<strong>and</strong>ler to be used for resp<strong>on</strong>se phase<br />
• Resp<strong>on</strong>se Phase<br />
" C<strong>on</strong>tent h<strong>and</strong>ler formulates <str<strong>on</strong>g>the</str<strong>on</strong>g> resp<strong>on</strong>se body<br />
• Logging Phase<br />
" Status, errors, informati<strong>on</strong>,etc are logged<br />
• Cleanup Phase<br />
" deallocate resources, close databases, free memory etc.<br />
michael_slavich@ hp.com<br />
Page 16
DSO Support<br />
• Flexibility (dynamic loading).<br />
• Extensibility.<br />
• Include new modules using DSO/apxs feature.<br />
michael_slavich@ hp.com<br />
Page 17
Third-party Modules/software<br />
• mod_perl<br />
• mod_php<br />
• mod_jserv<br />
• mod_ssl<br />
• openSSL (toolkit)<br />
• RSA BSAFE Crypto-C (library)<br />
• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Jserv (c<strong>on</strong>tainer)<br />
• Tomcat (c<strong>on</strong>tainer)<br />
• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />
• www.perl.org<br />
• www.php.net<br />
• http://jserv.apache.org<br />
• www.modssl.org<br />
• www.openssl.org<br />
• www.rsasecurity.com<br />
• http://jserv.apache.org<br />
• http://jakarta.apache.org<br />
• www.webmin.com<br />
michael_slavich@ hp.com<br />
Page 18
Tomcat<br />
• Open source Java project from ASF<br />
• Servlets & JSP implementati<strong>on</strong><br />
• jarkarta.apache.org<br />
• Strategic<br />
• Bundled with <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
• St<strong>and</strong>al<strong>on</strong>e/out-of-process servlet c<strong>on</strong>tainer<br />
michael_slavich@ hp.com<br />
Page 19
Tomcat vs <str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />
• Runs with <str<strong>on</strong>g>Apache</str<strong>on</strong>g>, IIS,<br />
iPlanet, etc.,<br />
• Can run st<strong>and</strong>al<strong>on</strong>e<br />
• Supports Servlet API 2.2 &<br />
above<br />
• Supports JSP 1.1<br />
• St<strong>and</strong>ard support to run<br />
<strong>on</strong>ly with <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
• No st<strong>and</strong>al<strong>on</strong>e support<br />
• Supports Servlet API 2.0<br />
• Requires Java Servlet<br />
Development Kit 2.0 to be<br />
downloaded from SUN<br />
michael_slavich@ hp.com<br />
Page 20
Tomcat/JServ<br />
Port 8081<br />
Port 80 Port 8081<br />
Servlet invocati<strong>on</strong>s<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />
VM<br />
input<br />
jserv.c<strong>on</strong>f<br />
mod_jserv<br />
httpd<br />
input<br />
tomcat.c<strong>on</strong>f<br />
Tomcat<br />
VM<br />
JSP invocati<strong>on</strong>s<br />
michael_slavich@ hp.com<br />
Page 21
Servlets v/s JSP<br />
• Developers preference<br />
• Logic for generati<strong>on</strong> of <str<strong>on</strong>g>the</str<strong>on</strong>g><br />
dynamic c<strong>on</strong>tent <str<strong>on</strong>g>is</str<strong>on</strong>g> an intrinsic<br />
part of <str<strong>on</strong>g>the</str<strong>on</strong>g> servlets itself<br />
• Tight coupling of<br />
presentati<strong>on</strong> & c<strong>on</strong>tent<br />
• Developers & <str<strong>on</strong>g>Web</str<strong>on</strong>g> page<br />
designers preference<br />
• JSP compr<str<strong>on</strong>g>is</str<strong>on</strong>g>e of static<br />
HTML/XML comp<strong>on</strong>ents,<br />
special JSP tags & opti<strong>on</strong>al<br />
“scriptlets”<br />
• Cleaner separati<strong>on</strong> of static<br />
presentati<strong>on</strong> & dynamic<br />
c<strong>on</strong>tent<br />
• Dynamic c<strong>on</strong>tent served in a<br />
variety of formats:<br />
HTML/DHTML, WML, XML<br />
michael_slavich@ hp.com<br />
Page 22
JSP Architecture<br />
<br />
<br />
<br />
<br />
Today <str<strong>on</strong>g>is</str<strong>on</strong>g>:<br />
<br />
<br />
<br />
.jsp file<br />
Page Compilati<strong>on</strong><br />
Servlet C<strong>on</strong>tainer<br />
Servlet<br />
michael_slavich@ hp.com<br />
Page 23
CGI<br />
• Flexible glue for bridging web protocols <strong>and</strong> o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />
forms of IT.<br />
• Close to “write <strong>on</strong>ce, run everywhere.”<br />
• Not performance-sensitive for larger loads.<br />
• Separate processes for requests. Processes exit <strong>on</strong>ce<br />
d<strong>on</strong>e.<br />
michael_slavich@ hp.com<br />
Page 24
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> 2.0 Design<br />
• Primary Goals<br />
! Layered abstracti<strong>on</strong>s for multithreading, shared memory,<br />
portability <strong>and</strong> protocol streams<br />
! HTTP protocol extensi<strong>on</strong>s, <str<strong>on</strong>g>Web</str<strong>on</strong>g>DAV<br />
! New c<strong>on</strong>figurati<strong>on</strong> language <strong>and</strong> run-time interface<br />
! More flexible, detailed module hooks <strong>and</strong> API<br />
! Fr<strong>on</strong>t-end caching <strong>and</strong> proxy/gateway awareness<br />
michael_slavich@ hp.com<br />
Page 25
Security<br />
• User Au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong><br />
• SSL<br />
" Basic (mod_auth*) - text encoding<br />
" Digest (mod_digest) - MD5 encoding<br />
" An<strong>on</strong>ymous<br />
" 128-bit encrypti<strong>on</strong> through mod_ssl+openSSL+Crypto-C<br />
" <str<strong>on</strong>g>Server</str<strong>on</strong>g> & client certificates<br />
• Combinati<strong>on</strong> of multiple security schemes<br />
michael_slavich@ hp.com<br />
Page 26
Certificates<br />
• Binding of a public key to an individual<br />
• Digital signatures to protect public keys<br />
• Issued by Certifying Authority (CA)<br />
• Key pair -> public + private, used for exchanging<br />
informati<strong>on</strong> between clients<br />
• Client & <str<strong>on</strong>g>Server</str<strong>on</strong>g> certificates<br />
michael_slavich@ hp.com<br />
Page 27
Security Products With <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />
• mod_ssl - <str<strong>on</strong>g>Apache</str<strong>on</strong>g> interface to openSSL<br />
•openSSL<br />
• RSA BSAFE Crypto-C<br />
michael_slavich@ hp.com<br />
Page 28
Motivati<strong>on</strong> for SSL<br />
• HTTP <str<strong>on</strong>g>is</str<strong>on</strong>g> an unsecure applicati<strong>on</strong> level<br />
protocol <strong>on</strong> top of TCP/IP<br />
• HTTP lacks both peer au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong> <strong>and</strong><br />
reliable encrypted communicati<strong>on</strong><br />
HTTP<br />
TCP<br />
IP<br />
SSL HTTP<br />
SSL<br />
TCP<br />
IP<br />
HTTPS<br />
• Secure Sockets Layer (SSL) <str<strong>on</strong>g>is</str<strong>on</strong>g> an<br />
additi<strong>on</strong>al transport protocol <strong>on</strong> top of<br />
TCP/IP providing communicati<strong>on</strong><br />
au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong>, privacy <strong>and</strong> reliability<br />
through str<strong>on</strong>g cryptographic techniques.<br />
• Current St<strong>and</strong>ards: SSLv3 (Netscape) <strong>and</strong><br />
TLSv1 (IETF)<br />
• HTTP Secure (HTTPS) <str<strong>on</strong>g>is</str<strong>on</strong>g> HTTP over<br />
SSL <strong>and</strong> thus a secure HTTP variant.<br />
michael_slavich@ hp.com<br />
Page 29
mod_ssl<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> module provides str<strong>on</strong>g cryptography for <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3<br />
webserver via <str<strong>on</strong>g>the</str<strong>on</strong>g> Secure Sockets Layer (SSL v2/v3) <strong>and</strong> Transport Layer<br />
Security (TLS v1) protocols by <str<strong>on</strong>g>the</str<strong>on</strong>g> help of <str<strong>on</strong>g>the</str<strong>on</strong>g> Open Source SSL/TLS toolkit<br />
OpenSSL which <str<strong>on</strong>g>is</str<strong>on</strong>g> based <strong>on</strong> SSLeay from Eric A. Young <strong>and</strong> Tim J. Huds<strong>on</strong>.<br />
mod_foo<br />
mod_bar<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> API<br />
...<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Core<br />
mod_ssl<br />
SSLeay/<br />
openSSL<br />
BSAFE<br />
michael_slavich@ hp.com<br />
Page 30
OpenSSL<br />
• Open source effort through www.openssl.org<br />
• OpenSSL <str<strong>on</strong>g>is</str<strong>on</strong>g> a cryptography toolkit implementing <str<strong>on</strong>g>the</str<strong>on</strong>g> Secure Sockets<br />
Layer (SSL v2/v3) <strong>and</strong> Transport Layer Security (TLS v1) network<br />
protocols <strong>and</strong> related cryptography st<strong>and</strong>ards required by <str<strong>on</strong>g>the</str<strong>on</strong>g>m.<br />
• C<strong>on</strong>tents:<br />
! openssl tool kit - comm<strong>and</strong> line tool for using various<br />
cryptographic functi<strong>on</strong>s of OpenSSL’s crypto library from <str<strong>on</strong>g>the</str<strong>on</strong>g><br />
shell.<br />
! crypto library - implements a wide range of cryptographic<br />
algorithms used in various Internet st<strong>and</strong>ards. The functi<strong>on</strong>ality<br />
includes symmetric encrypti<strong>on</strong>, public key cryptography <strong>and</strong> key<br />
agreement, certificate h<strong>and</strong>ling, cryptographic hash functi<strong>on</strong>s <strong>and</strong><br />
a cryptographic pseudo-r<strong>and</strong>om number generator.<br />
! ssl library - implements SSL v2/v3 <strong>and</strong> Transport Layer Security<br />
michael_slavich@ hp.com<br />
Page 31
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <strong>and</strong> SSL<br />
• SSL available as a product <strong>and</strong> also as Open Source<br />
! API’s in C, C++ <strong>and</strong> Java (JSSE)<br />
• Currently available modules to plug-in SSL to <str<strong>on</strong>g>Apache</str<strong>on</strong>g> :<br />
! <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-SSL – also known as Raven-SSL<br />
! Mod-SSL – derived from <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-SSL<br />
! Mod-TLS – being developed by ASF<br />
• Mod_ssl with OpenSSL <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> most widely used combinati<strong>on</strong> (12% worldwide)<br />
! Can be enabled as DSO<br />
! Uses Extended API (EAPI)<br />
! Easy c<strong>on</strong>figurati<strong>on</strong> in httpd.c<strong>on</strong>f<br />
michael_slavich@ hp.com<br />
Page 32
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> – SSL Architecture<br />
michael_slavich@ hp.com<br />
Page 33
Sample httpd.c<strong>on</strong>f<br />
michael_slavich@ hp.com<br />
Page 34
BSAFE<br />
• Cryptographic library - Crypto-C 5.x<br />
• Quality, high-performance implementati<strong>on</strong> of<br />
encrypti<strong>on</strong> & signing algorithms<br />
• Support for multiple key <strong>and</strong> data representati<strong>on</strong>s<br />
including ASN.1 BER<br />
michael_slavich@ hp.com<br />
Page 35
Virtual Hosting & Proxy<br />
• IP-based Virtual Hosting<br />
" Single domain name mapped to multiple IP addresses<br />
• Name-based Virtual Hosting<br />
" Multiple domain names multiplexed over single IP address<br />
• Proxy<br />
" Intermediate host between client <strong>and</strong> <str<strong>on</strong>g>the</str<strong>on</strong>g> serving host<br />
michael_slavich@ hp.com<br />
Page 36
hp <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-base <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> Features<br />
SECURITY<br />
•Full Strength RSA encrypti<strong>on</strong> with competitive performance<br />
•128-bit <str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g> Encrypti<strong>on</strong><br />
•Support for Virtual Vaults<br />
•Support for Proxy <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
Adminstrative<br />
Java<br />
Installati<strong>on</strong><br />
•Support Dynamic Shared Object (DSO)<br />
•Easy migrati<strong>on</strong> of proprietary modules<br />
•<str<strong>on</strong>g>Web</str<strong>on</strong>g> based graphical user interface<br />
•Tomcat servlet/JSP c<strong>on</strong>tainer<br />
•Jserv serlet engine<br />
•Out of <str<strong>on</strong>g>the</str<strong>on</strong>g> Box <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />
•<strong>HP</strong> Software Depot Swinstall format<br />
O<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />
•Broadv<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong> plug-in<br />
•NES Certificati<strong>on</strong> Migrati<strong>on</strong> Tool<br />
•P<strong>HP</strong><br />
michael_slavich@ hp.com<br />
Page 37
Where to get <str<strong>on</strong>g>Apache</str<strong>on</strong>g> for <strong>HP</strong>-<strong>UX</strong><br />
• www.software.hp.com<br />
" internet & security<br />
" hp apache-based web serverDesigned to run out-of-<str<strong>on</strong>g>the</str<strong>on</strong>g>-box <strong>on</strong> <strong>HP</strong>-<br />
<strong>UX</strong> 11.0 <strong>and</strong> 11i, <str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> ensures str<strong>on</strong>g<br />
security, high performance, <strong>and</strong> <str<strong>on</strong>g>is</str<strong>on</strong>g> easy to use so your web site <str<strong>on</strong>g>is</str<strong>on</strong>g> always<br />
reliable <strong>and</strong> easy to manage. $0.0<br />
michael_slavich@ hp.com<br />
Page 38
Installati<strong>on</strong> of <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> from<br />
<str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> Software Depot<br />
• Download <strong>and</strong> print <str<strong>on</strong>g>the</str<strong>on</strong>g> Download, GUI Installati<strong>on</strong> Instructi<strong>on</strong>s <strong>and</strong> Comm<strong>and</strong> Line Installati<strong>on</strong><br />
Instructi<strong>on</strong>s<br />
• Read <str<strong>on</strong>g>the</str<strong>on</strong>g> Download, GUI Installati<strong>on</strong> Instructi<strong>on</strong>s <strong>and</strong> Comm<strong>and</strong> Line Installati<strong>on</strong> Instructi<strong>on</strong>s<br />
• Follow <str<strong>on</strong>g>the</str<strong>on</strong>g> Download <strong>and</strong> GUI Installati<strong>on</strong> Instructi<strong>on</strong>s<br />
• <br />
• #swl<str<strong>on</strong>g>is</str<strong>on</strong>g>t -s /d<str<strong>on</strong>g>is</str<strong>on</strong>g>k/<str<strong>on</strong>g>Apache</str<strong>on</strong>g>/B9415AA_11.00.depot<br />
• B9415AA 1.3.14.00 <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> with <str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g> (128bit) Encrypti<strong>on</strong><br />
• #swinstall –s /d<str<strong>on</strong>g>is</str<strong>on</strong>g>k/<str<strong>on</strong>g>Apache</str<strong>on</strong>g>/B9415AA_11.00.depot \* @<br />
• Up<strong>on</strong> successful installati<strong>on</strong>, swinstall runs <str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> automatically<br />
• Refer to <str<strong>on</strong>g>the</str<strong>on</strong>g> release notes <strong>and</strong> c<strong>on</strong>fig notes included in <str<strong>on</strong>g>the</str<strong>on</strong>g> rpoduct<br />
• Number of Kbytes installed: 31443<br />
michael_slavich@ hp.com<br />
Page 39
Post Installati<strong>on</strong> View of System<br />
• # ps –ef | grep apache<br />
www 4438 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />
www 4439 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />
www 4437 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />
www 4435 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />
www 4436 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />
root 4433 0001 0 16:34:31 ? 0:00 /opt/apache/bin/httpd<br />
• # ls /opt/apache<br />
……<br />
• #ls /opt/tomcat<br />
…….<br />
michael_slavich@ hp.com<br />
Page 40
A look at what’s installed <strong>and</strong> where<br />
• #lsf /opt/apache<br />
Jserv/ c<strong>on</strong>fig.notes man/<br />
LICENSE htdocs/ php/<br />
apache.release.notes ic<strong>on</strong>s/ php.user.guide<br />
apache.tuning.notes include/ proxy/<br />
bin/ lib/ servlets/<br />
cgi-bin/ libexec/ ssl/<br />
c<strong>on</strong>f/ logs/ webadmin/<br />
michael_slavich@ hp.com<br />
Page 41
A look at what’s installed <strong>and</strong> where<br />
(c<strong>on</strong>tinued)<br />
• #lsf /opt/tomcat<br />
LICENSE<br />
bin/<br />
classes/<br />
c<strong>on</strong>f/<br />
c<strong>on</strong>fig.notes<br />
doc/<br />
jserv_to_tomcat_migrati<strong>on</strong>_guide<br />
lib/<br />
logs<br />
src<br />
tomcat.tuning.notes<br />
webapps/<br />
work/<br />
michael_slavich@ hp.com<br />
Page 42
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
• Secti<strong>on</strong> 1: Global Envir<strong>on</strong>ment (default values)<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Type st<strong>and</strong>al<strong>on</strong>e<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Root /opt/apache<br />
PidFile /opt/apache/logs/httpd.pid<br />
ScoreBoardFile /opt/apache/logs/httpd.scoreboard<br />
Timeout 300<br />
KeepAlive On<br />
MaxKeepAliveRequests 100<br />
KeepAliveTimeout 15<br />
MinSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 5<br />
MaxSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 10<br />
Start<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 5<br />
MaxClients 150<br />
MaxRequestsPerChild 0<br />
**Note: Load <strong>and</strong> add DSO Secti<strong>on</strong> “DO NOT TOUCH” unless you know what you are doing!!!<br />
michael_slavich@ hp.com<br />
Page 43
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 1: Global Envir<strong>on</strong>ment (values not set)<br />
#LockFile /opt/apache/logs/httpd.lock<br />
#resourceC<strong>on</strong>fig c<strong>on</strong>f/srm.c<strong>on</strong>f<br />
#accessC<strong>on</strong>fig c<strong>on</strong>f/access.c<strong>on</strong>f<br />
#L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 3000<br />
#L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 12.34.56.78:80<br />
#BindAddress *<br />
#ExtendedStatus On<br />
**Note: Load <strong>and</strong> add DSO Secti<strong>on</strong> “DO NOT TOUCH” unless you know what you<br />
are doing!!!<br />
michael_slavich@ hp.com<br />
Page 44
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />
Port 80<br />
<br />
L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 80<br />
L<str<strong>on</strong>g>is</str<strong>on</strong>g>te 443<br />
<br />
User www<br />
Group o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Admin www@mslavich.nsr.hp.com<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Name mslavich.nsr.hp.com<br />
DocumentRoot “/opt/apache/htdocs”<br />
michael_slavich@ hp.com<br />
Page 45
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />
<br />
Opti<strong>on</strong>s FollowSymLinks<br />
AllowOverride N<strong>on</strong>e<br />
<br />
<br />
Opti<strong>on</strong>s Indexes FollowSymLinks MultiViews<br />
AllowOverride N<strong>on</strong>e<br />
Order allow,deny<br />
Allow from all<br />
<br />
<br />
UserDir public_html<br />
<br />
michael_slavich@ hp.com<br />
Page 46
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />
<br />
DirectoryIndex index.html index.php<br />
<br />
AccessFileName .htaccess<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />
<br />
MIMEMagicFile /opt/apache/c<strong>on</strong>f/magic<br />
<br />
HostnameLookups Off<br />
ErrorLog /opt/apache/logs/error_log<br />
LogLevel warn<br />
LogFormat “%h %l %u %t \%r\” %b \”%{Referer}i\” \”%{User-Agent}I\”” combined<br />
LogFormat “%h %l %u %t \%r\” %b” comm<strong>on</strong><br />
LogFormat \”%{Referer}i -> %U” referer<br />
LogFormat “%{User-agent}i”agent<br />
CustomLog /opt/apache/logs/access_log comm<strong>on</strong><br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Signature On<br />
michael_slavich@ hp.com<br />
Page 48
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />
<br />
<br />
allow from all<br />
deny from n<strong>on</strong>e<br />
order allow,deny<br />
<br />
Alias /ic<strong>on</strong>s/ “opt/apache/ic<strong>on</strong>s”<br />
<br />
ScriptAlias /cgi-bin/ “opt/apache/cgi-bin”<br />
<br />
AllowOverride N<strong>on</strong>e<br />
Opti<strong>on</strong>s N<strong>on</strong>e<br />
Order allow,deny<br />
Allow from all<br />
<br />
michael_slavich@ hp.com<br />
Page 49
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> ( “some” values set)<br />
<br />
IndexOpti<strong>on</strong>s FancyIndexing<br />
## AddIc<strong>on</strong>* directives<br />
….<br />
ReadmeName README<br />
HeaderName HEADER<br />
<br />
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> ( features)<br />
# Customize behavior based up<strong>on</strong> browser<br />
<br />
# Allow server status reports with <str<strong>on</strong>g>the</str<strong>on</strong>g> URL of http://servername/server-status<br />
# Allow remote server c<strong>on</strong>figurati<strong>on</strong> reports<br />
# Log attempted exploits of “old” security bugs<br />
# Proxy <str<strong>on</strong>g>Server</str<strong>on</strong>g> directives<br />
michael_slavich@ hp.com<br />
Page 51
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />
c<strong>on</strong>’t<br />
• Secti<strong>on</strong> 3: Virtual Hosts ( features)<br />
# Use name based virtual hosting<br />
# SSL Global C<strong>on</strong>text<br />
#All SSL c<strong>on</strong>figurati<strong>on</strong> in th<str<strong>on</strong>g>is</str<strong>on</strong>g> c<strong>on</strong>text applies both to<br />
#<str<strong>on</strong>g>the</str<strong>on</strong>g> main server <strong>and</strong> all SSL-enabled virtual hosts<br />
#SSL Cipher Suite<br />
#<str<strong>on</strong>g>Server</str<strong>on</strong>g> Certificate<br />
#<str<strong>on</strong>g>Server</str<strong>on</strong>g> Private Key<br />
#Additi<strong>on</strong>al Certificate related items<br />
#Include both jserv.c<strong>on</strong>f <strong>and</strong> tomcat.c<strong>on</strong>f<br />
michael_slavich@ hp.com<br />
Page 52
michael_slavich@ hp.com<br />
Page 53
michael_slavich@ hp.com<br />
Page 54
New Features in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3<br />
• Dynamic Shared Object (DSO) support<br />
• Support for Windows NT/95<br />
• Support for NetWare 5.x<br />
• Re-organized Sources<br />
• Reliable Piped Logs<br />
michael_slavich@ hp.com<br />
Page 55
New Features in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3 (c<strong>on</strong>’t)<br />
• Performance Improvements<br />
• C<strong>on</strong>figurati<strong>on</strong> Enhancements<br />
• Module Enhancements<br />
• API Additi<strong>on</strong>s <strong>and</strong> Changes<br />
• M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous Enhancements<br />
michael_slavich@ hp.com<br />
Page 56
Features Included in <str<strong>on</strong>g>the</str<strong>on</strong>g> Latest Release<br />
• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> 1.3.14.00<br />
• Tomcat 3.1.1<br />
• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Jserv 1.1.1<br />
• P<strong>HP</strong> 4.04pl1<br />
• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min 0.84<br />
• Netscape Certificate Migrati<strong>on</strong> Tool 3.1.1<br />
• Third Party Support: Broadv<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong> plug-in<br />
michael_slavich@ hp.com<br />
Page 57
michael_slavich@ hp.com<br />
Page 58
michael_slavich@ hp.com<br />
Page 59
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (Core)<br />
Directives<br />
AccessC<strong>on</strong>fig AccessFile Name AddDefaultCharset<br />
AddModule AllowOverride AuthName<br />
AuthType BindAddress BS2000Account<br />
ClearModuleL<str<strong>on</strong>g>is</str<strong>on</strong>g>t C<strong>on</strong>tentDigest CoreDumpDirectory<br />
DefaultType <br />
DocumentRoot EBCDICC<strong>on</strong>vert EBCDICC<strong>on</strong>vertByType<br />
EBCDICKludge ErrorDocument ErrorLog<br />
Group<br />
HostNameLookups IdentitiyCheck <br />
Include KeepAlive<br />
KeepAliveTimeout <br />
LimitrequestBody LimitRequestField LimitRequestFieldsize<br />
michael_slavich@ hp.com<br />
Page 60
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (Core c<strong>on</strong>’t)<br />
LimitRequestLine L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten L<str<strong>on</strong>g>is</str<strong>on</strong>g>tenBacklog<br />
LockFile<br />
LogLevel MaxClients MaxKeepAliveRequests<br />
MaxRequestsPerChild MaxSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s MinSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />
NameVirtualHost Opti<strong>on</strong>s PidFile<br />
Port Require ResourceC<strong>on</strong>fig<br />
RLimitCPU RLimitMEM RLimitNPROC<br />
Sat<str<strong>on</strong>g>is</str<strong>on</strong>g>fy ScoreBoardFile ScriptInterpreterSource<br />
SendBufferSize <str<strong>on</strong>g>Server</str<strong>on</strong>g>Admin <str<strong>on</strong>g>Server</str<strong>on</strong>g>Name<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Name <str<strong>on</strong>g>Server</str<strong>on</strong>g>Path <str<strong>on</strong>g>Server</str<strong>on</strong>g>Root<br />
<str<strong>on</strong>g>Server</str<strong>on</strong>g>Signature <str<strong>on</strong>g>Server</str<strong>on</strong>g>Tokens <str<strong>on</strong>g>Server</str<strong>on</strong>g>Type<br />
Start<str<strong>on</strong>g>Server</str<strong>on</strong>g>s ThreadsPerChild ThreadStackSize<br />
TimeOut<br />
UseCan<strong>on</strong>icalName User<br />
<br />
michael_slavich@ hp.com<br />
Page 61
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type)<br />
• Envir<strong>on</strong>ment Creati<strong>on</strong><br />
! mod_env<br />
! mod_setenfif<br />
! mod_unique_id<br />
• C<strong>on</strong>tent Type Dec<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong>s<br />
! mod_mime<br />
! mod_mime_magic<br />
! mod_negotiati<strong>on</strong><br />
• Url Mapping<br />
! mod_alias<br />
! mod_rewrite<br />
! mod_userdir<br />
! mod_speling<br />
! mod_vhost_alias<br />
michael_slavich@ hp.com<br />
Page 62
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />
• Directory H<strong>and</strong>ling<br />
! mod_dir<br />
! mod_autoindex<br />
• HTTP Resp<strong>on</strong>se<br />
! mod_headers<br />
! mod_cern_meta<br />
! mod_expires<br />
! mod_as<str<strong>on</strong>g>is</str<strong>on</strong>g><br />
• Access C<strong>on</strong>trol<br />
! mod_access<br />
! mod_auth<br />
! mod_auth_dbm<br />
! mod_auth_db<br />
! mod_auth_an<strong>on</strong><br />
! mod_auth_digest<br />
michael_slavich@ hp.com<br />
Page 63
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />
• Dynamic C<strong>on</strong>tent<br />
! mod_include<br />
! mod_cgi<br />
! mod_acti<strong>on</strong>s<br />
! mod_<str<strong>on</strong>g>is</str<strong>on</strong>g>api (WIN32 <strong>on</strong>ly)<br />
• Internal C<strong>on</strong>tent H<strong>and</strong>lers<br />
• Logging<br />
! mod_log_c<strong>on</strong>fig<br />
! mod_log_agent<br />
! mod_log_referer<br />
! mod_usertrack<br />
! mod_status<br />
! mod_info<br />
michael_slavich@ hp.com<br />
Page 64
<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />
• M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous<br />
! mod_imap<br />
! mod_proxy<br />
! mod_so<br />
! mod_mmap<br />
• Development<br />
! mod_example<br />
• Obsolete<br />
! mod_browser (replaced by<br />
mod_setenvif in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3 <strong>and</strong> up)<br />
! mod_cookies (replaced by<br />
mod_usertrack)<br />
! mod_dld (replaced by mod_so)<br />
! mod_log_comm<strong>on</strong> (replaced by<br />
mod_log_c<strong>on</strong>fig<br />
michael_slavich@ hp.com<br />
Page 65
To c<strong>on</strong>trol <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server<br />
• Login as root<br />
< To start <strong>and</strong> stop <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server><br />
# /opt/apache/bin/apachectl start<br />
# /opt/apache/bin/apachectl stop<br />
< To start <strong>and</strong> stop <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server with SSL capabilities><br />
# /opt/apache/bin/apachectl startssl<br />
Note: You will be prompted for a PEM encoded phrase, which <str<strong>on</strong>g>is</str<strong>on</strong>g> “hp.com”<br />
# /opt/apache/bin/apachectl stop<br />
michael_slavich@ hp.com<br />
Page 66
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />
To C<strong>on</strong>figure webmin <strong>and</strong> start:<br />
Install <str<strong>on</strong>g>the</str<strong>on</strong>g> appropriate versi<strong>on</strong> of perl if needed from<br />
http://devresource.hp.com/OpenSource/Tools/perl/perl.html<br />
#/opt/apache/webmin/setup.sh<br />
• To start webmin: Login as root<br />
#/opt/apache/webmin/webmin-init start<br />
http://:10000<br />
Login: admin<br />
Password : hp.com<br />
• To stop webmin<br />
/opt/apache/webmin/webmin-init stop<br />
michael_slavich@ hp.com<br />
Page 67
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />
michael_slavich@ hp.com<br />
Page 68
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min C<strong>on</strong>figurati<strong>on</strong><br />
michael_slavich@ hp.com<br />
Page 69
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (System)<br />
michael_slavich@ hp.com<br />
Page 70
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (<str<strong>on</strong>g>Server</str<strong>on</strong>g>s)<br />
michael_slavich@ hp.com<br />
Page 71
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (<str<strong>on</strong>g>Server</str<strong>on</strong>g> Management)<br />
michael_slavich@ hp.com<br />
Page 72
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (Directory C<strong>on</strong>trol)<br />
michael_slavich@ hp.com<br />
Page 73
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (Directory Opti<strong>on</strong>s)<br />
michael_slavich@ hp.com<br />
Page 74
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (.htaccess file)<br />
michael_slavich@ hp.com<br />
Page 75
<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (O<str<strong>on</strong>g>the</str<strong>on</strong>g>rs)<br />
michael_slavich@ hp.com<br />
Page 76
M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous Info<br />
• Alternative source for perl <strong>and</strong> o<str<strong>on</strong>g>the</str<strong>on</strong>g>r hp-ux c<strong>on</strong>trib software<br />
" http://gatekeep.cs.utah.edu/ftp/hpux/Languages<br />
" http://gatekeep.cs.utah.edu/ftp/hpux/Languages/perl-5.6.1/<br />
michael_slavich@ hp.com<br />
Page 77
Review of Goals <strong>and</strong> Objectives<br />
• Overview of <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> <strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />
• An introducti<strong>on</strong> into <str<strong>on</strong>g>the</str<strong>on</strong>g> positi<strong>on</strong>ing <strong>and</strong> architecture<br />
• A comprehensive view of <str<strong>on</strong>g>the</str<strong>on</strong>g> features <strong>and</strong> functi<strong>on</strong>ality<br />
• A walkthrough of <str<strong>on</strong>g>the</str<strong>on</strong>g> steps involved in installati<strong>on</strong> <strong>and</strong><br />
c<strong>on</strong>figurati<strong>on</strong><br />
• A look at <str<strong>on</strong>g>the</str<strong>on</strong>g> webmin admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> interface<br />
• Where to go for more informati<strong>on</strong><br />
michael_slavich@ hp.com<br />
Page 78