Borland VisiBroker® 7.0 - Borland Technical Publications

Security for the Apache web serverNotePlease enter the following 'extra' attributesto be sent with your certificate requestA challenge password []:An optional company name []:Using configuration from/bin//openssl.cnf4 The key file created must be moved to the location specified inSSLCertificateKeyFile.5 The certificate file must be moved to the location specified in SSLCertificateFile.The generated certificate file is sufficient for testing purposes. However, in a productionenvironment, you must obtain a certificate signed by a recognized certificate authority(CA).Verifying that mod_ssl is activeImportantNoteIn order to verify that mod_ssl is working, try to access your web server using https.How you do this depends on where you have placed the SSLEngine directive (see“Creating key and certificate files” on page 79).■■If SSLEngine is defined at the server level, all server access goes through mod_ssl.If SSLEngine is defined on the host level, you must direct your access to thatparticular host by providing the correct port number or IP address.When attempting to make a secure connection from a web browser, make sure thatyou use “https” instead of “http” in your URL. For example:https://host.domain.com:443/index.htmlTo find out more information about your web server, you can configure mod_info toserve configuration information.1 To enable mod_info, you must modify the httpd.conf file located in:/var/domains//configurations//mos//confby un-commenting the following line:LoadModule info_module /lib//mod_info.so2 Next, you need to uncomment the following section of code:SetHandler server-infoOrder deny, allow# Deny from allAllow from .your_domain.comDo not uncomment the Deny from all directive.3 Edit the Allow from .your_domain.com directive to match your domain.Your Apache web server will now respond to the following query by displayingserver configuration information:https:///server-infoThis query does not require a secure “https” connection; mod_info configuration isindependent of the protocol used by the Apache web server. server.80 VisiBroker Security Guide