07.05.2014 Views

What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE

What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE

What is the Apache (Strong) Web Server on HP-UX and ... - OpenMPE

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

<strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />

Back to <str<strong>on</strong>g>the</str<strong>on</strong>g> Basics:<br />

<str<strong>on</strong>g>What</str<strong>on</strong>g> <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

(<str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g>) <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

<strong>on</strong> <strong>HP</strong>-<strong>UX</strong> <strong>and</strong> <str<strong>on</strong>g>What</str<strong>on</strong>g><br />

to Do with it<br />

Michael Slavich<br />

Hewlett-Packard<br />

michael_slavich@hp.com<br />

I<br />

Page 1


<strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Based<br />

<str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

I<br />

Page 2


Goals <strong>and</strong> Objectives<br />

• Overview of <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> <strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />

• An introducti<strong>on</strong> into <str<strong>on</strong>g>the</str<strong>on</strong>g> positi<strong>on</strong>ing <strong>and</strong> architecture<br />

• A comprehensive view of <str<strong>on</strong>g>the</str<strong>on</strong>g> features <strong>and</strong> functi<strong>on</strong>ality<br />

• A walkthrough of <str<strong>on</strong>g>the</str<strong>on</strong>g> steps involved in installati<strong>on</strong> <strong>and</strong><br />

c<strong>on</strong>figurati<strong>on</strong><br />

• A look at <str<strong>on</strong>g>the</str<strong>on</strong>g> webmin admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> interface<br />

• Where to go for more informati<strong>on</strong><br />

michael_slavich@ hp.com<br />

Page 3


Topics<br />

• <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based web server<br />

• Introducti<strong>on</strong> to <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Architecture<br />

• Third-party modules<br />

• Java soluti<strong>on</strong>s<br />

• Security soluti<strong>on</strong>s<br />

• Installati<strong>on</strong> <strong>and</strong> C<strong>on</strong>figurati<strong>on</strong><br />

• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min Admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> Tools<br />

michael_slavich@ hp.com<br />

Page 4


<strong>HP</strong>-<strong>UX</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g><str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

In Perspective<br />

Vendor-specific<br />

Development &<br />

Deployment<br />

tools<br />

JDK, Compilers,<br />

Linkers, debuggers<br />

& o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />

Development<br />

tools<br />

System &<br />

Network<br />

Management<br />

tools<br />

<str<strong>on</strong>g>Web</str<strong>on</strong>g>/Enterpr<str<strong>on</strong>g>is</str<strong>on</strong>g>e applicati<strong>on</strong>s<br />

CRM/B2B <str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />

Tom cat/W eb<br />

plugins<br />

Database layer<br />

Applicati<strong>on</strong><br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />

Java Virtual<br />

Machine<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

System & Network services<br />

<strong>HP</strong>-<strong>UX</strong> Operating System<br />

Soluti<strong>on</strong>s<br />

For Medium/Large<br />

Enterpr<str<strong>on</strong>g>is</str<strong>on</strong>g>e customers, XSPs<br />

Financial, e-Commerce<br />

E-Services, Supply Chain<br />

Etc.<br />

Soluti<strong>on</strong>s<br />

For Small/medium<br />

Customers: XSPs,<br />

Individuals,<br />

developers, n<strong>on</strong>-profit,<br />

Educati<strong>on</strong> etc.<br />

michael_slavich@ hp.com<br />

Page 5


Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

• Most popular web server in <str<strong>on</strong>g>the</str<strong>on</strong>g> market<br />

• Easy extensibility<br />

• Open source advantage<br />

• Most popular security soluti<strong>on</strong> - mod_ssl, openSSL &<br />

RSA Crypto-C libraries<br />

• Efficient <strong>and</strong> high-performance cryptographic libraries<br />

from RSA Security Co.<br />

michael_slavich@ hp.com<br />

Page 6


Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

(c<strong>on</strong>’t)<br />

• Java Servlet/JSP extensibility with Tomcat<br />

• Easy migrati<strong>on</strong> of proprietary modules to <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g><br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

• Integrati<strong>on</strong> with o<str<strong>on</strong>g>the</str<strong>on</strong>g>r <strong>HP</strong> products like Virtual Vault,<br />

<str<strong>on</strong>g>Web</str<strong>on</strong>g>QoS etc.,<br />

• LDAP, P<strong>HP</strong>, Fr<strong>on</strong>t page extensi<strong>on</strong> <strong>and</strong> XML<br />

capabilities in <str<strong>on</strong>g>the</str<strong>on</strong>g> roadmap<br />

michael_slavich@ hp.com<br />

Page 7


Why an <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

(c<strong>on</strong>’t)<br />

• IPv6 support<br />

• <str<strong>on</strong>g>Web</str<strong>on</strong>g>-based graphical user interface for easy<br />

admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> & c<strong>on</strong>figurati<strong>on</strong><br />

• Efficient access c<strong>on</strong>trol (not present in iPlanet)<br />

• Load balancing am<strong>on</strong>g clusters (through<br />

mod_backh<strong>and</strong> in our roadmap)<br />

michael_slavich@ hp.com<br />

Page 8


Why <str<strong>on</strong>g>Apache</str<strong>on</strong>g>?<br />

• Open source software - FREE<br />

• www.apache.org<br />

• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>is</str<strong>on</strong>g> a HTTP 1.0/1.1 compliant web server<br />

• <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> server : http://software.hp.com (under<br />

Internet & Security soluti<strong>on</strong>s)<br />

• Most popular web server in <str<strong>on</strong>g>the</str<strong>on</strong>g> market …<br />

michael_slavich@ hp.com<br />

Page 9


Market-leadership:<br />

<str<strong>on</strong>g>Web</str<strong>on</strong>g>-server deployment stat<str<strong>on</strong>g>is</str<strong>on</strong>g>tics<br />

michael_slavich@ hp.com<br />

Page 10


C<strong>on</strong>tent Thru’ <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

• Static – html, images etc<br />

• Dynamic – server-side programming<br />

! CGI, FastCGI<br />

! Java Servlets/JSPs<br />

! <str<strong>on</strong>g>Server</str<strong>on</strong>g> Side Includes<br />

! Embedded interpreters – mod_perl, P<strong>HP</strong><br />

michael_slavich@ hp.com<br />

Page 11


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Architecture<br />

Static modules DSO modules mod_jserv<br />

openSSL<br />

mod_perl<br />

mod_so<br />

mod_ssl<br />

mod_php<br />

perl<br />

mod_core<br />

…<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />

HTTP 1.0/1.1<br />

Tomcat<br />

michael_slavich@ hp.com<br />

Page 12


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> C<strong>on</strong>ceptual View<br />

michael_slavich@ hp.com<br />

Page 13


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> Life Cycle<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g> startup<br />

And<br />

C<strong>on</strong>figurati<strong>on</strong><br />

Module initializati<strong>on</strong><br />

fork fork fork<br />

Child initializati<strong>on</strong><br />

Child initializati<strong>on</strong><br />

Child initializati<strong>on</strong><br />

Request<br />

Loop<br />

Request<br />

Loop<br />

Request<br />

Loop<br />

Child exit Child exit Child exit<br />

michael_slavich@ hp.com<br />

Page 14


HTTP Request <strong>and</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Request Loop<br />

Request method URI of <str<strong>on</strong>g>the</str<strong>on</strong>g> document to be retrieved Protocol Versi<strong>on</strong><br />

michael_slavich@ hp.com<br />

Page 15


Request/Resp<strong>on</strong>se Phases<br />

• URI Translati<strong>on</strong> Phase<br />

" Alias, ScriptAlias, DocumentRoot<br />

• Access c<strong>on</strong>trol Phase<br />

Request informati<strong>on</strong> <str<strong>on</strong>g>is</str<strong>on</strong>g> stored under<br />

struct request_rec<br />

" Where <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> request coming from?<br />

• Au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong> Phase<br />

" Who <str<strong>on</strong>g>is</str<strong>on</strong>g> it coming from?<br />

• Authorizati<strong>on</strong> Phase<br />

" Who <str<strong>on</strong>g>is</str<strong>on</strong>g> allowed to perform th<str<strong>on</strong>g>is</str<strong>on</strong>g> particular request?<br />

• MIME type checking phase<br />

" depends <strong>on</strong> file name, extensi<strong>on</strong> or document root<br />

" chooses <str<strong>on</strong>g>the</str<strong>on</strong>g> c<strong>on</strong>tent h<strong>and</strong>ler to be used for resp<strong>on</strong>se phase<br />

• Resp<strong>on</strong>se Phase<br />

" C<strong>on</strong>tent h<strong>and</strong>ler formulates <str<strong>on</strong>g>the</str<strong>on</strong>g> resp<strong>on</strong>se body<br />

• Logging Phase<br />

" Status, errors, informati<strong>on</strong>,etc are logged<br />

• Cleanup Phase<br />

" deallocate resources, close databases, free memory etc.<br />

michael_slavich@ hp.com<br />

Page 16


DSO Support<br />

• Flexibility (dynamic loading).<br />

• Extensibility.<br />

• Include new modules using DSO/apxs feature.<br />

michael_slavich@ hp.com<br />

Page 17


Third-party Modules/software<br />

• mod_perl<br />

• mod_php<br />

• mod_jserv<br />

• mod_ssl<br />

• openSSL (toolkit)<br />

• RSA BSAFE Crypto-C (library)<br />

• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Jserv (c<strong>on</strong>tainer)<br />

• Tomcat (c<strong>on</strong>tainer)<br />

• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />

• www.perl.org<br />

• www.php.net<br />

• http://jserv.apache.org<br />

• www.modssl.org<br />

• www.openssl.org<br />

• www.rsasecurity.com<br />

• http://jserv.apache.org<br />

• http://jakarta.apache.org<br />

• www.webmin.com<br />

michael_slavich@ hp.com<br />

Page 18


Tomcat<br />

• Open source Java project from ASF<br />

• Servlets & JSP implementati<strong>on</strong><br />

• jarkarta.apache.org<br />

• Strategic<br />

• Bundled with <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

• St<strong>and</strong>al<strong>on</strong>e/out-of-process servlet c<strong>on</strong>tainer<br />

michael_slavich@ hp.com<br />

Page 19


Tomcat vs <str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />

• Runs with <str<strong>on</strong>g>Apache</str<strong>on</strong>g>, IIS,<br />

iPlanet, etc.,<br />

• Can run st<strong>and</strong>al<strong>on</strong>e<br />

• Supports Servlet API 2.2 &<br />

above<br />

• Supports JSP 1.1<br />

• St<strong>and</strong>ard support to run<br />

<strong>on</strong>ly with <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

• No st<strong>and</strong>al<strong>on</strong>e support<br />

• Supports Servlet API 2.0<br />

• Requires Java Servlet<br />

Development Kit 2.0 to be<br />

downloaded from SUN<br />

michael_slavich@ hp.com<br />

Page 20


Tomcat/JServ<br />

Port 8081<br />

Port 80 Port 8081<br />

Servlet invocati<strong>on</strong>s<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> JServ<br />

VM<br />

input<br />

jserv.c<strong>on</strong>f<br />

mod_jserv<br />

httpd<br />

input<br />

tomcat.c<strong>on</strong>f<br />

Tomcat<br />

VM<br />

JSP invocati<strong>on</strong>s<br />

michael_slavich@ hp.com<br />

Page 21


Servlets v/s JSP<br />

• Developers preference<br />

• Logic for generati<strong>on</strong> of <str<strong>on</strong>g>the</str<strong>on</strong>g><br />

dynamic c<strong>on</strong>tent <str<strong>on</strong>g>is</str<strong>on</strong>g> an intrinsic<br />

part of <str<strong>on</strong>g>the</str<strong>on</strong>g> servlets itself<br />

• Tight coupling of<br />

presentati<strong>on</strong> & c<strong>on</strong>tent<br />

• Developers & <str<strong>on</strong>g>Web</str<strong>on</strong>g> page<br />

designers preference<br />

• JSP compr<str<strong>on</strong>g>is</str<strong>on</strong>g>e of static<br />

HTML/XML comp<strong>on</strong>ents,<br />

special JSP tags & opti<strong>on</strong>al<br />

“scriptlets”<br />

• Cleaner separati<strong>on</strong> of static<br />

presentati<strong>on</strong> & dynamic<br />

c<strong>on</strong>tent<br />

• Dynamic c<strong>on</strong>tent served in a<br />

variety of formats:<br />

HTML/DHTML, WML, XML<br />

michael_slavich@ hp.com<br />

Page 22


JSP Architecture<br />

<br />

<br />

<br />

<br />

Today <str<strong>on</strong>g>is</str<strong>on</strong>g>:<br />

<br />

<br />

<br />

.jsp file<br />

Page Compilati<strong>on</strong><br />

Servlet C<strong>on</strong>tainer<br />

Servlet<br />

michael_slavich@ hp.com<br />

Page 23


CGI<br />

• Flexible glue for bridging web protocols <strong>and</strong> o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />

forms of IT.<br />

• Close to “write <strong>on</strong>ce, run everywhere.”<br />

• Not performance-sensitive for larger loads.<br />

• Separate processes for requests. Processes exit <strong>on</strong>ce<br />

d<strong>on</strong>e.<br />

michael_slavich@ hp.com<br />

Page 24


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> 2.0 Design<br />

• Primary Goals<br />

! Layered abstracti<strong>on</strong>s for multithreading, shared memory,<br />

portability <strong>and</strong> protocol streams<br />

! HTTP protocol extensi<strong>on</strong>s, <str<strong>on</strong>g>Web</str<strong>on</strong>g>DAV<br />

! New c<strong>on</strong>figurati<strong>on</strong> language <strong>and</strong> run-time interface<br />

! More flexible, detailed module hooks <strong>and</strong> API<br />

! Fr<strong>on</strong>t-end caching <strong>and</strong> proxy/gateway awareness<br />

michael_slavich@ hp.com<br />

Page 25


Security<br />

• User Au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong><br />

• SSL<br />

" Basic (mod_auth*) - text encoding<br />

" Digest (mod_digest) - MD5 encoding<br />

" An<strong>on</strong>ymous<br />

" 128-bit encrypti<strong>on</strong> through mod_ssl+openSSL+Crypto-C<br />

" <str<strong>on</strong>g>Server</str<strong>on</strong>g> & client certificates<br />

• Combinati<strong>on</strong> of multiple security schemes<br />

michael_slavich@ hp.com<br />

Page 26


Certificates<br />

• Binding of a public key to an individual<br />

• Digital signatures to protect public keys<br />

• Issued by Certifying Authority (CA)<br />

• Key pair -> public + private, used for exchanging<br />

informati<strong>on</strong> between clients<br />

• Client & <str<strong>on</strong>g>Server</str<strong>on</strong>g> certificates<br />

michael_slavich@ hp.com<br />

Page 27


Security Products With <str<strong>on</strong>g>Apache</str<strong>on</strong>g><br />

• mod_ssl - <str<strong>on</strong>g>Apache</str<strong>on</strong>g> interface to openSSL<br />

•openSSL<br />

• RSA BSAFE Crypto-C<br />

michael_slavich@ hp.com<br />

Page 28


Motivati<strong>on</strong> for SSL<br />

• HTTP <str<strong>on</strong>g>is</str<strong>on</strong>g> an unsecure applicati<strong>on</strong> level<br />

protocol <strong>on</strong> top of TCP/IP<br />

• HTTP lacks both peer au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong> <strong>and</strong><br />

reliable encrypted communicati<strong>on</strong><br />

HTTP<br />

TCP<br />

IP<br />

SSL HTTP<br />

SSL<br />

TCP<br />

IP<br />

HTTPS<br />

• Secure Sockets Layer (SSL) <str<strong>on</strong>g>is</str<strong>on</strong>g> an<br />

additi<strong>on</strong>al transport protocol <strong>on</strong> top of<br />

TCP/IP providing communicati<strong>on</strong><br />

au<str<strong>on</strong>g>the</str<strong>on</strong>g>nticati<strong>on</strong>, privacy <strong>and</strong> reliability<br />

through str<strong>on</strong>g cryptographic techniques.<br />

• Current St<strong>and</strong>ards: SSLv3 (Netscape) <strong>and</strong><br />

TLSv1 (IETF)<br />

• HTTP Secure (HTTPS) <str<strong>on</strong>g>is</str<strong>on</strong>g> HTTP over<br />

SSL <strong>and</strong> thus a secure HTTP variant.<br />

michael_slavich@ hp.com<br />

Page 29


mod_ssl<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> module provides str<strong>on</strong>g cryptography for <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3<br />

webserver via <str<strong>on</strong>g>the</str<strong>on</strong>g> Secure Sockets Layer (SSL v2/v3) <strong>and</strong> Transport Layer<br />

Security (TLS v1) protocols by <str<strong>on</strong>g>the</str<strong>on</strong>g> help of <str<strong>on</strong>g>the</str<strong>on</strong>g> Open Source SSL/TLS toolkit<br />

OpenSSL which <str<strong>on</strong>g>is</str<strong>on</strong>g> based <strong>on</strong> SSLeay from Eric A. Young <strong>and</strong> Tim J. Huds<strong>on</strong>.<br />

mod_foo<br />

mod_bar<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> API<br />

...<br />

<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Core<br />

mod_ssl<br />

SSLeay/<br />

openSSL<br />

BSAFE<br />

michael_slavich@ hp.com<br />

Page 30


OpenSSL<br />

• Open source effort through www.openssl.org<br />

• OpenSSL <str<strong>on</strong>g>is</str<strong>on</strong>g> a cryptography toolkit implementing <str<strong>on</strong>g>the</str<strong>on</strong>g> Secure Sockets<br />

Layer (SSL v2/v3) <strong>and</strong> Transport Layer Security (TLS v1) network<br />

protocols <strong>and</strong> related cryptography st<strong>and</strong>ards required by <str<strong>on</strong>g>the</str<strong>on</strong>g>m.<br />

• C<strong>on</strong>tents:<br />

! openssl tool kit - comm<strong>and</strong> line tool for using various<br />

cryptographic functi<strong>on</strong>s of OpenSSL’s crypto library from <str<strong>on</strong>g>the</str<strong>on</strong>g><br />

shell.<br />

! crypto library - implements a wide range of cryptographic<br />

algorithms used in various Internet st<strong>and</strong>ards. The functi<strong>on</strong>ality<br />

includes symmetric encrypti<strong>on</strong>, public key cryptography <strong>and</strong> key<br />

agreement, certificate h<strong>and</strong>ling, cryptographic hash functi<strong>on</strong>s <strong>and</strong><br />

a cryptographic pseudo-r<strong>and</strong>om number generator.<br />

! ssl library - implements SSL v2/v3 <strong>and</strong> Transport Layer Security<br />

michael_slavich@ hp.com<br />

Page 31


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> <strong>and</strong> SSL<br />

• SSL available as a product <strong>and</strong> also as Open Source<br />

! API’s in C, C++ <strong>and</strong> Java (JSSE)<br />

• Currently available modules to plug-in SSL to <str<strong>on</strong>g>Apache</str<strong>on</strong>g> :<br />

! <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-SSL – also known as Raven-SSL<br />

! Mod-SSL – derived from <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-SSL<br />

! Mod-TLS – being developed by ASF<br />

• Mod_ssl with OpenSSL <str<strong>on</strong>g>is</str<strong>on</strong>g> <str<strong>on</strong>g>the</str<strong>on</strong>g> most widely used combinati<strong>on</strong> (12% worldwide)<br />

! Can be enabled as DSO<br />

! Uses Extended API (EAPI)<br />

! Easy c<strong>on</strong>figurati<strong>on</strong> in httpd.c<strong>on</strong>f<br />

michael_slavich@ hp.com<br />

Page 32


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> – SSL Architecture<br />

michael_slavich@ hp.com<br />

Page 33


Sample httpd.c<strong>on</strong>f<br />

michael_slavich@ hp.com<br />

Page 34


BSAFE<br />

• Cryptographic library - Crypto-C 5.x<br />

• Quality, high-performance implementati<strong>on</strong> of<br />

encrypti<strong>on</strong> & signing algorithms<br />

• Support for multiple key <strong>and</strong> data representati<strong>on</strong>s<br />

including ASN.1 BER<br />

michael_slavich@ hp.com<br />

Page 35


Virtual Hosting & Proxy<br />

• IP-based Virtual Hosting<br />

" Single domain name mapped to multiple IP addresses<br />

• Name-based Virtual Hosting<br />

" Multiple domain names multiplexed over single IP address<br />

• Proxy<br />

" Intermediate host between client <strong>and</strong> <str<strong>on</strong>g>the</str<strong>on</strong>g> serving host<br />

michael_slavich@ hp.com<br />

Page 36


hp <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-base <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> Features<br />

SECURITY<br />

•Full Strength RSA encrypti<strong>on</strong> with competitive performance<br />

•128-bit <str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g> Encrypti<strong>on</strong><br />

•Support for Virtual Vaults<br />

•Support for Proxy <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

Adminstrative<br />

Java<br />

Installati<strong>on</strong><br />

•Support Dynamic Shared Object (DSO)<br />

•Easy migrati<strong>on</strong> of proprietary modules<br />

•<str<strong>on</strong>g>Web</str<strong>on</strong>g> based graphical user interface<br />

•Tomcat servlet/JSP c<strong>on</strong>tainer<br />

•Jserv serlet engine<br />

•Out of <str<strong>on</strong>g>the</str<strong>on</strong>g> Box <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g><br />

•<strong>HP</strong> Software Depot Swinstall format<br />

O<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />

•Broadv<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong> plug-in<br />

•NES Certificati<strong>on</strong> Migrati<strong>on</strong> Tool<br />

•P<strong>HP</strong><br />

michael_slavich@ hp.com<br />

Page 37


Where to get <str<strong>on</strong>g>Apache</str<strong>on</strong>g> for <strong>HP</strong>-<strong>UX</strong><br />

• www.software.hp.com<br />

" internet & security<br />

" hp apache-based web serverDesigned to run out-of-<str<strong>on</strong>g>the</str<strong>on</strong>g>-box <strong>on</strong> <strong>HP</strong>-<br />

<strong>UX</strong> 11.0 <strong>and</strong> 11i, <str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> ensures str<strong>on</strong>g<br />

security, high performance, <strong>and</strong> <str<strong>on</strong>g>is</str<strong>on</strong>g> easy to use so your web site <str<strong>on</strong>g>is</str<strong>on</strong>g> always<br />

reliable <strong>and</strong> easy to manage. $0.0<br />

michael_slavich@ hp.com<br />

Page 38


Installati<strong>on</strong> of <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> from<br />

<str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> Software Depot<br />

• Download <strong>and</strong> print <str<strong>on</strong>g>the</str<strong>on</strong>g> Download, GUI Installati<strong>on</strong> Instructi<strong>on</strong>s <strong>and</strong> Comm<strong>and</strong> Line Installati<strong>on</strong><br />

Instructi<strong>on</strong>s<br />

• Read <str<strong>on</strong>g>the</str<strong>on</strong>g> Download, GUI Installati<strong>on</strong> Instructi<strong>on</strong>s <strong>and</strong> Comm<strong>and</strong> Line Installati<strong>on</strong> Instructi<strong>on</strong>s<br />

• Follow <str<strong>on</strong>g>the</str<strong>on</strong>g> Download <strong>and</strong> GUI Installati<strong>on</strong> Instructi<strong>on</strong>s<br />

• <br />

• #swl<str<strong>on</strong>g>is</str<strong>on</strong>g>t -s /d<str<strong>on</strong>g>is</str<strong>on</strong>g>k/<str<strong>on</strong>g>Apache</str<strong>on</strong>g>/B9415AA_11.00.depot<br />

• B9415AA 1.3.14.00 <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> with <str<strong>on</strong>g>Str<strong>on</strong>g</str<strong>on</strong>g> (128bit) Encrypti<strong>on</strong><br />

• #swinstall –s /d<str<strong>on</strong>g>is</str<strong>on</strong>g>k/<str<strong>on</strong>g>Apache</str<strong>on</strong>g>/B9415AA_11.00.depot \* @<br />

• Up<strong>on</strong> successful installati<strong>on</strong>, swinstall runs <str<strong>on</strong>g>the</str<strong>on</strong>g> <strong>HP</strong> <str<strong>on</strong>g>Apache</str<strong>on</strong>g>-based <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> automatically<br />

• Refer to <str<strong>on</strong>g>the</str<strong>on</strong>g> release notes <strong>and</strong> c<strong>on</strong>fig notes included in <str<strong>on</strong>g>the</str<strong>on</strong>g> rpoduct<br />

• Number of Kbytes installed: 31443<br />

michael_slavich@ hp.com<br />

Page 39


Post Installati<strong>on</strong> View of System<br />

• # ps –ef | grep apache<br />

www 4438 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />

www 4439 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />

www 4437 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />

www 4435 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />

www 4436 4433 0 16:34:32 ? 0:00 /opt/apache/bin/httpd<br />

root 4433 0001 0 16:34:31 ? 0:00 /opt/apache/bin/httpd<br />

• # ls /opt/apache<br />

……<br />

• #ls /opt/tomcat<br />

…….<br />

michael_slavich@ hp.com<br />

Page 40


A look at what’s installed <strong>and</strong> where<br />

• #lsf /opt/apache<br />

Jserv/ c<strong>on</strong>fig.notes man/<br />

LICENSE htdocs/ php/<br />

apache.release.notes ic<strong>on</strong>s/ php.user.guide<br />

apache.tuning.notes include/ proxy/<br />

bin/ lib/ servlets/<br />

cgi-bin/ libexec/ ssl/<br />

c<strong>on</strong>f/ logs/ webadmin/<br />

michael_slavich@ hp.com<br />

Page 41


A look at what’s installed <strong>and</strong> where<br />

(c<strong>on</strong>tinued)<br />

• #lsf /opt/tomcat<br />

LICENSE<br />

bin/<br />

classes/<br />

c<strong>on</strong>f/<br />

c<strong>on</strong>fig.notes<br />

doc/<br />

jserv_to_tomcat_migrati<strong>on</strong>_guide<br />

lib/<br />

logs<br />

src<br />

tomcat.tuning.notes<br />

webapps/<br />

work/<br />

michael_slavich@ hp.com<br />

Page 42


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

• Secti<strong>on</strong> 1: Global Envir<strong>on</strong>ment (default values)<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Type st<strong>and</strong>al<strong>on</strong>e<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Root /opt/apache<br />

PidFile /opt/apache/logs/httpd.pid<br />

ScoreBoardFile /opt/apache/logs/httpd.scoreboard<br />

Timeout 300<br />

KeepAlive On<br />

MaxKeepAliveRequests 100<br />

KeepAliveTimeout 15<br />

MinSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 5<br />

MaxSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 10<br />

Start<str<strong>on</strong>g>Server</str<strong>on</strong>g>s 5<br />

MaxClients 150<br />

MaxRequestsPerChild 0<br />

**Note: Load <strong>and</strong> add DSO Secti<strong>on</strong> “DO NOT TOUCH” unless you know what you are doing!!!<br />

michael_slavich@ hp.com<br />

Page 43


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 1: Global Envir<strong>on</strong>ment (values not set)<br />

#LockFile /opt/apache/logs/httpd.lock<br />

#resourceC<strong>on</strong>fig c<strong>on</strong>f/srm.c<strong>on</strong>f<br />

#accessC<strong>on</strong>fig c<strong>on</strong>f/access.c<strong>on</strong>f<br />

#L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 3000<br />

#L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 12.34.56.78:80<br />

#BindAddress *<br />

#ExtendedStatus On<br />

**Note: Load <strong>and</strong> add DSO Secti<strong>on</strong> “DO NOT TOUCH” unless you know what you<br />

are doing!!!<br />

michael_slavich@ hp.com<br />

Page 44


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />

Port 80<br />

<br />

L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten 80<br />

L<str<strong>on</strong>g>is</str<strong>on</strong>g>te 443<br />

<br />

User www<br />

Group o<str<strong>on</strong>g>the</str<strong>on</strong>g>r<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Admin www@mslavich.nsr.hp.com<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Name mslavich.nsr.hp.com<br />

DocumentRoot “/opt/apache/htdocs”<br />

michael_slavich@ hp.com<br />

Page 45


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />

<br />

Opti<strong>on</strong>s FollowSymLinks<br />

AllowOverride N<strong>on</strong>e<br />

<br />

<br />

Opti<strong>on</strong>s Indexes FollowSymLinks MultiViews<br />

AllowOverride N<strong>on</strong>e<br />

Order allow,deny<br />

Allow from all<br />

<br />

<br />

UserDir public_html<br />

<br />

michael_slavich@ hp.com<br />

Page 46


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />

<br />

DirectoryIndex index.html index.php<br />

<br />

AccessFileName .htaccess<br />


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />

<br />

MIMEMagicFile /opt/apache/c<strong>on</strong>f/magic<br />

<br />

HostnameLookups Off<br />

ErrorLog /opt/apache/logs/error_log<br />

LogLevel warn<br />

LogFormat “%h %l %u %t \%r\” %b \”%{Referer}i\” \”%{User-Agent}I\”” combined<br />

LogFormat “%h %l %u %t \%r\” %b” comm<strong>on</strong><br />

LogFormat \”%{Referer}i -> %U” referer<br />

LogFormat “%{User-agent}i”agent<br />

CustomLog /opt/apache/logs/access_log comm<strong>on</strong><br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Signature On<br />

michael_slavich@ hp.com<br />

Page 48


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> (values set)<br />

<br />

<br />

allow from all<br />

deny from n<strong>on</strong>e<br />

order allow,deny<br />

<br />

Alias /ic<strong>on</strong>s/ “opt/apache/ic<strong>on</strong>s”<br />

<br />

ScriptAlias /cgi-bin/ “opt/apache/cgi-bin”<br />

<br />

AllowOverride N<strong>on</strong>e<br />

Opti<strong>on</strong>s N<strong>on</strong>e<br />

Order allow,deny<br />

Allow from all<br />

<br />

michael_slavich@ hp.com<br />

Page 49


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> ( “some” values set)<br />

<br />

IndexOpti<strong>on</strong>s FancyIndexing<br />

## AddIc<strong>on</strong>* directives<br />

….<br />

ReadmeName README<br />

HeaderName HEADER<br />

<br />


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 2: ‘Main’ server c<strong>on</strong>figurati<strong>on</strong> ( features)<br />

# Customize behavior based up<strong>on</strong> browser<br />

<br />

# Allow server status reports with <str<strong>on</strong>g>the</str<strong>on</strong>g> URL of http://servername/server-status<br />

# Allow remote server c<strong>on</strong>figurati<strong>on</strong> reports<br />

# Log attempted exploits of “old” security bugs<br />

# Proxy <str<strong>on</strong>g>Server</str<strong>on</strong>g> directives<br />

michael_slavich@ hp.com<br />

Page 51


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> C<strong>on</strong>figurati<strong>on</strong> file (httpd.c<strong>on</strong>f)<br />

c<strong>on</strong>’t<br />

• Secti<strong>on</strong> 3: Virtual Hosts ( features)<br />

# Use name based virtual hosting<br />

# SSL Global C<strong>on</strong>text<br />

#All SSL c<strong>on</strong>figurati<strong>on</strong> in th<str<strong>on</strong>g>is</str<strong>on</strong>g> c<strong>on</strong>text applies both to<br />

#<str<strong>on</strong>g>the</str<strong>on</strong>g> main server <strong>and</strong> all SSL-enabled virtual hosts<br />

#SSL Cipher Suite<br />

#<str<strong>on</strong>g>Server</str<strong>on</strong>g> Certificate<br />

#<str<strong>on</strong>g>Server</str<strong>on</strong>g> Private Key<br />

#Additi<strong>on</strong>al Certificate related items<br />

#Include both jserv.c<strong>on</strong>f <strong>and</strong> tomcat.c<strong>on</strong>f<br />

michael_slavich@ hp.com<br />

Page 52


michael_slavich@ hp.com<br />

Page 53


michael_slavich@ hp.com<br />

Page 54


New Features in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3<br />

• Dynamic Shared Object (DSO) support<br />

• Support for Windows NT/95<br />

• Support for NetWare 5.x<br />

• Re-organized Sources<br />

• Reliable Piped Logs<br />

michael_slavich@ hp.com<br />

Page 55


New Features in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3 (c<strong>on</strong>’t)<br />

• Performance Improvements<br />

• C<strong>on</strong>figurati<strong>on</strong> Enhancements<br />

• Module Enhancements<br />

• API Additi<strong>on</strong>s <strong>and</strong> Changes<br />

• M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous Enhancements<br />

michael_slavich@ hp.com<br />

Page 56


Features Included in <str<strong>on</strong>g>the</str<strong>on</strong>g> Latest Release<br />

• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> 1.3.14.00<br />

• Tomcat 3.1.1<br />

• <str<strong>on</strong>g>Apache</str<strong>on</strong>g> Jserv 1.1.1<br />

• P<strong>HP</strong> 4.04pl1<br />

• <str<strong>on</strong>g>Web</str<strong>on</strong>g>min 0.84<br />

• Netscape Certificate Migrati<strong>on</strong> Tool 3.1.1<br />

• Third Party Support: Broadv<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong> plug-in<br />

michael_slavich@ hp.com<br />

Page 57


michael_slavich@ hp.com<br />

Page 58


michael_slavich@ hp.com<br />

Page 59


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (Core)<br />

Directives<br />

AccessC<strong>on</strong>fig AccessFile Name AddDefaultCharset<br />

AddModule AllowOverride AuthName<br />

AuthType BindAddress BS2000Account<br />

ClearModuleL<str<strong>on</strong>g>is</str<strong>on</strong>g>t C<strong>on</strong>tentDigest CoreDumpDirectory<br />

DefaultType <br />

DocumentRoot EBCDICC<strong>on</strong>vert EBCDICC<strong>on</strong>vertByType<br />

EBCDICKludge ErrorDocument ErrorLog<br />

Group<br />

HostNameLookups IdentitiyCheck <br />

Include KeepAlive<br />

KeepAliveTimeout <br />

LimitrequestBody LimitRequestField LimitRequestFieldsize<br />

michael_slavich@ hp.com<br />

Page 60


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (Core c<strong>on</strong>’t)<br />

LimitRequestLine L<str<strong>on</strong>g>is</str<strong>on</strong>g>ten L<str<strong>on</strong>g>is</str<strong>on</strong>g>tenBacklog<br />

LockFile<br />

LogLevel MaxClients MaxKeepAliveRequests<br />

MaxRequestsPerChild MaxSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s MinSpare<str<strong>on</strong>g>Server</str<strong>on</strong>g>s<br />

NameVirtualHost Opti<strong>on</strong>s PidFile<br />

Port Require ResourceC<strong>on</strong>fig<br />

RLimitCPU RLimitMEM RLimitNPROC<br />

Sat<str<strong>on</strong>g>is</str<strong>on</strong>g>fy ScoreBoardFile ScriptInterpreterSource<br />

SendBufferSize <str<strong>on</strong>g>Server</str<strong>on</strong>g>Admin <str<strong>on</strong>g>Server</str<strong>on</strong>g>Name<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Name <str<strong>on</strong>g>Server</str<strong>on</strong>g>Path <str<strong>on</strong>g>Server</str<strong>on</strong>g>Root<br />

<str<strong>on</strong>g>Server</str<strong>on</strong>g>Signature <str<strong>on</strong>g>Server</str<strong>on</strong>g>Tokens <str<strong>on</strong>g>Server</str<strong>on</strong>g>Type<br />

Start<str<strong>on</strong>g>Server</str<strong>on</strong>g>s ThreadsPerChild ThreadStackSize<br />

TimeOut<br />

UseCan<strong>on</strong>icalName User<br />

<br />

michael_slavich@ hp.com<br />

Page 61


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type)<br />

• Envir<strong>on</strong>ment Creati<strong>on</strong><br />

! mod_env<br />

! mod_setenfif<br />

! mod_unique_id<br />

• C<strong>on</strong>tent Type Dec<str<strong>on</strong>g>is</str<strong>on</strong>g>i<strong>on</strong>s<br />

! mod_mime<br />

! mod_mime_magic<br />

! mod_negotiati<strong>on</strong><br />

• Url Mapping<br />

! mod_alias<br />

! mod_rewrite<br />

! mod_userdir<br />

! mod_speling<br />

! mod_vhost_alias<br />

michael_slavich@ hp.com<br />

Page 62


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />

• Directory H<strong>and</strong>ling<br />

! mod_dir<br />

! mod_autoindex<br />

• HTTP Resp<strong>on</strong>se<br />

! mod_headers<br />

! mod_cern_meta<br />

! mod_expires<br />

! mod_as<str<strong>on</strong>g>is</str<strong>on</strong>g><br />

• Access C<strong>on</strong>trol<br />

! mod_access<br />

! mod_auth<br />

! mod_auth_dbm<br />

! mod_auth_db<br />

! mod_auth_an<strong>on</strong><br />

! mod_auth_digest<br />

michael_slavich@ hp.com<br />

Page 63


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />

• Dynamic C<strong>on</strong>tent<br />

! mod_include<br />

! mod_cgi<br />

! mod_acti<strong>on</strong>s<br />

! mod_<str<strong>on</strong>g>is</str<strong>on</strong>g>api (WIN32 <strong>on</strong>ly)<br />

• Internal C<strong>on</strong>tent H<strong>and</strong>lers<br />

• Logging<br />

! mod_log_c<strong>on</strong>fig<br />

! mod_log_agent<br />

! mod_log_referer<br />

! mod_usertrack<br />

! mod_status<br />

! mod_info<br />

michael_slavich@ hp.com<br />

Page 64


<str<strong>on</strong>g>Apache</str<strong>on</strong>g> Modules (by type c<strong>on</strong>’t)<br />

• M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous<br />

! mod_imap<br />

! mod_proxy<br />

! mod_so<br />

! mod_mmap<br />

• Development<br />

! mod_example<br />

• Obsolete<br />

! mod_browser (replaced by<br />

mod_setenvif in <str<strong>on</strong>g>Apache</str<strong>on</strong>g> 1.3 <strong>and</strong> up)<br />

! mod_cookies (replaced by<br />

mod_usertrack)<br />

! mod_dld (replaced by mod_so)<br />

! mod_log_comm<strong>on</strong> (replaced by<br />

mod_log_c<strong>on</strong>fig<br />

michael_slavich@ hp.com<br />

Page 65


To c<strong>on</strong>trol <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server<br />

• Login as root<br />

< To start <strong>and</strong> stop <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server><br />

# /opt/apache/bin/apachectl start<br />

# /opt/apache/bin/apachectl stop<br />

< To start <strong>and</strong> stop <str<strong>on</strong>g>the</str<strong>on</strong>g> apache web server with SSL capabilities><br />

# /opt/apache/bin/apachectl startssl<br />

Note: You will be prompted for a PEM encoded phrase, which <str<strong>on</strong>g>is</str<strong>on</strong>g> “hp.com”<br />

# /opt/apache/bin/apachectl stop<br />

michael_slavich@ hp.com<br />

Page 66


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />

To C<strong>on</strong>figure webmin <strong>and</strong> start:<br />

Install <str<strong>on</strong>g>the</str<strong>on</strong>g> appropriate versi<strong>on</strong> of perl if needed from<br />

http://devresource.hp.com/OpenSource/Tools/perl/perl.html<br />

#/opt/apache/webmin/setup.sh<br />

• To start webmin: Login as root<br />

#/opt/apache/webmin/webmin-init start<br />

http://:10000<br />

Login: admin<br />

Password : hp.com<br />

• To stop webmin<br />

/opt/apache/webmin/webmin-init stop<br />

michael_slavich@ hp.com<br />

Page 67


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min<br />

michael_slavich@ hp.com<br />

Page 68


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min C<strong>on</strong>figurati<strong>on</strong><br />

michael_slavich@ hp.com<br />

Page 69


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (System)<br />

michael_slavich@ hp.com<br />

Page 70


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (<str<strong>on</strong>g>Server</str<strong>on</strong>g>s)<br />

michael_slavich@ hp.com<br />

Page 71


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (<str<strong>on</strong>g>Server</str<strong>on</strong>g> Management)<br />

michael_slavich@ hp.com<br />

Page 72


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (Directory C<strong>on</strong>trol)<br />

michael_slavich@ hp.com<br />

Page 73


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (Directory Opti<strong>on</strong>s)<br />

michael_slavich@ hp.com<br />

Page 74


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (.htaccess file)<br />

michael_slavich@ hp.com<br />

Page 75


<str<strong>on</strong>g>Web</str<strong>on</strong>g>min (O<str<strong>on</strong>g>the</str<strong>on</strong>g>rs)<br />

michael_slavich@ hp.com<br />

Page 76


M<str<strong>on</strong>g>is</str<strong>on</strong>g>cellaneous Info<br />

• Alternative source for perl <strong>and</strong> o<str<strong>on</strong>g>the</str<strong>on</strong>g>r hp-ux c<strong>on</strong>trib software<br />

" http://gatekeep.cs.utah.edu/ftp/hpux/Languages<br />

" http://gatekeep.cs.utah.edu/ftp/hpux/Languages/perl-5.6.1/<br />

michael_slavich@ hp.com<br />

Page 77


Review of Goals <strong>and</strong> Objectives<br />

• Overview of <str<strong>on</strong>g>the</str<strong>on</strong>g> <str<strong>on</strong>g>Apache</str<strong>on</strong>g> <str<strong>on</strong>g>Web</str<strong>on</strong>g> <str<strong>on</strong>g>Server</str<strong>on</strong>g> <strong>on</strong> <strong>HP</strong>-<strong>UX</strong><br />

• An introducti<strong>on</strong> into <str<strong>on</strong>g>the</str<strong>on</strong>g> positi<strong>on</strong>ing <strong>and</strong> architecture<br />

• A comprehensive view of <str<strong>on</strong>g>the</str<strong>on</strong>g> features <strong>and</strong> functi<strong>on</strong>ality<br />

• A walkthrough of <str<strong>on</strong>g>the</str<strong>on</strong>g> steps involved in installati<strong>on</strong> <strong>and</strong><br />

c<strong>on</strong>figurati<strong>on</strong><br />

• A look at <str<strong>on</strong>g>the</str<strong>on</strong>g> webmin admin<str<strong>on</strong>g>is</str<strong>on</strong>g>trati<strong>on</strong> interface<br />

• Where to go for more informati<strong>on</strong><br />

michael_slavich@ hp.com<br />

Page 78

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!