How to Install and Configure the Apache Software Using apache-ssl

This procedure installs a secure version of the Apache webserver. For procedures for installing a non-secure Apache webserver, see Installing a Non-Secure Apache Webserver.

1. Become superuser on a cluster member.

2. Install the Apache software, including apache-ssl, using the installation procedures found in the Apache installation documentation.

   To install apache-ssl, see the Apache installation documentation or the installation instructions at http://www.apache-ssl.org.

3. Update the httpd.conf configuration file.

   • Set the ServerName directive.

   • Set the BindAddress directive (optional).

   • Set the ServerType, ServerRoot, DocumentRoot, ScriptAlias, and LockFile directives.

   • Set the Port directive to the same number as the Port_list standard resource property. See Step 4 for more information.

   • Make changes to run as a proxy server if you choose to run the Apache software as a proxy server. See the Apache documentation for more information. If you will run the Apache software as a proxy server, the CacheRoot setting must point to a location on the cluster file system.

4. Verify that the port number or numbers in the httpd.conf file match those of the Port_list standard resource property.

   You can edit the httpd.conf configuration file to change its port number or numbers to match the standard Sun Cluster resource property default (port 80). Alternatively, while you configure Sun Cluster HA for Apache, you can set the Port_list standard property to match the setting in the httpd.conf file.

5. Install all certificates and keys.

6. Make sure that all your private keys are stored unencrypted.

   Later, when you attempt to start the webserver manually, it must not prompt you for a pass phrase.

7. Update the paths in the Apache start/stop script file (Bin_dir/httpsdct1).

   You must change the paths from the Apache defaults to match your Apache directory structure.

8. Perform the following tasks to verify your configuration changes.

   1. Run httpsdctl configtest to check the Apache httpd.conf file for correct syntax.

   2. Ensure that any logical hostnames or shared addresses that Apache uses are configured and online.

   3. Issue httpsdctl start to start up your Apache server by hand.

      If Apache does not start up correctly, correct the problem.

   4. After Apache has started, stop it before moving to the next procedure.