C H A P T E R 7 |
Installing and Configuring Apache Web Server Software |
This chapter explains how to configure and enable the Sun Crypto Accelerator 4000 board for use with Apache Web Servers. This chapter includes the following sections:
The following procedure describes how to create the private key and certificate required to enable Apache Web Servers to use the Sun Crypto Accelerator 4000 board. If you already have a private key and certificate, go to Enabling Apache Web Servers.
|
1. Generate an RSA private key in Privacy-Enhanced Mail (PEM) format.
2. Create your PEM passphrase.
This passphrase protects the key material. Be sure to select a strong passphrase, but one that you can remember. If you forget the passphrase, you will be unable to access your keys.
![]() |
Caution - You must remember the passphrase you enter. Without the passphrase, you cannot access your keys. There is no way to retrieve a lost passphrase. |
3. Create a certificate request using the keys you just created.
You must first enter the passphrase to access your keys. Then provide the appropriate information for the following fields:
The following is an example of how the certificate fields are entered:
4. Hand off the certreq.csr file to your certificate authority.
5. Once the certificate is signed by the certificate authority, go back to the previous section to setup the Apache Web Server.
Apache Web Server and mod_ssl are provided with the Solaris 10 Operating System. The following instructions are for these specific releases of Apache Web Server. Refer to the Apache Web Server documentation for more information.
|
1. Create an httpd configuration file.
For Solaris systems, the httpd.conf-example file is usually in /etc/apache. You can use this file as a template and copy it as follows:
2. Replace ServerName with your server name in the http.conf file.
3. If you have a private key and certificate, go to Step 4. If you do not have a private key and certificate, go to Creating a Private Key and Certificate.
4. Rename the private key as server.key and place it in the /etc/apache/ssl.key directory. Rename the private certificate as server.crt and place it in the /etc/apache/ssl.crt directory.
5. Start the Apache Web Server.
This assumes the Apache binary directory is /usr/apache/bin; if this is not the Apache binary directory, type in the correct directory.
6. Enter you PEM passphrase if prompted for it.
7. Verify the SSL enabled web server with a browser pointing to the following URL:
8. Verify that the Sun Crypto Accelerator 4000 Board is being used.
Verify that the rsaprivate field is being incremented in the statistics.
Copyright © 2005, Sun Microsystems, Inc. All Rights Reserved.