George2 at 12:04, 9 October 2015

2015-10-09T12:04:20Z

George2: Created page with "'''Apache, SSL and mod_jk''' yum install httpd httpd-devel libtool gcc* mod_ssl"

2015-10-09T11:06:40Z

Created page with "'''Apache, SSL and mod_jk''' yum install httpd httpd-devel libtool gcc* mod_ssl"

New page

'''Apache, SSL and mod_jk'''

yum install httpd httpd-devel libtool gcc* mod_ssl

← Older revision		Revision as of 12:04, 9 October 2015
Line 1:		Line 1:
	'''Apache, SSL and mod_jk'''		'''Apache, SSL and mod_jk'''

−	yum install httpd httpd-devel libtool gcc* mod_ssl	+	yum install httpd httpd-devel libtool gcc* mod_ssl<br>
		+
		+	I assume you know how to add SSL support in apache.<br>
		+	One thing I noted here is you can use self assigned certificate.<br>
		+
		+	openssl req -newkey rsa:2048 -new -x509 -days 3652 -nodes -out aws.crt -keyout aws.pem<br>
		+
		+	And included into your apache ssl configuration.<br>
		+
		+	Now fun part, how to connect your Apache with tomcat! you need read http://tomcat.apache.org/connectors-doc/<br>
		+
		+	In a short version, you do NOT have mod_jk build for CentOS 6. You have to do it from source code. So follow https://www.centos.org/modules/newbb/viewtopic.php?topic_id=33416<br>
		+
		+	But only need to do<br>
		+
		+	cd native/<br>
		+	./configure --with-apxs=/usr/sbin/apxs && make all
		+	ls apache-2.0/.libs/mod_jk.so<br>
		+
		+	Copy the mod_jk.so to /etc/httpd/modules/<br>
		+
		+	So here is my /etc/httpd/conf.d/ssl.conf<br>
		+	<source lang="text">
		+
		+	LoadModule ssl_module modules/mod_ssl.so<br>
		+	LoadModule jk_module modules/mod_jk.so<br>
		+
		+	Listen 443
		+	SSLPassPhraseDialog builtin
		+	SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
		+	SSLSessionCacheTimeout 300
		+	SSLMutex default
		+	SSLRandomSeed startup file:/dev/urandom 256
		+	SSLRandomSeed connect builtin
		+	SSLCryptoDevice builtin
		+
		+	<VirtualHost _default_:443>
		+	ErrorLog logs/ssl_error_log
		+	TransferLog logs/ssl_access_log
		+	LogLevel warn
		+	SSLEngine on
		+	SSLCertificateFile /opt/ssl/aws.crt
		+	SSLCertificateKeyFile /opt/ssl/aws.pem
		+	CustomLog logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
		+	</VirtualHost>
		+	JkWorkersFile conf.d/workers.properties
		+	JkLogFile logs/mod_jk.log
		+	JkLogLevel debug
		+	JkMount /idp/* worker1
		+	jkMountCopy ALL
		+	</source>
		+
		+	In /etc/httpd/conf.d/workers.properties
		+	<source lang="text">
		+	worker.list=worker1
		+	worker.type=ajp13
		+	worker.host=localhost
		+	worker.port=8009
		+	</source>
		+
		+	Restart the apache<br>
		+
		+	/etc/init.d/httpd restart<br>
		+
		+	you should get ok from<br>
		+
		+	curl --insecure "https://localhost/idp/profile/Status"<br>
		+
		+	Also you should be able to see https://localhost/idp/shibboleth.<br>
		+
		+	More important, according to here, you might wanna change the web.xml at /var/lib/tomcat6/webapps/idp/WEB-INF/web.xml so that you can see https://hostname/idp/status from another host.<br>
		+
		+	OK, you have the basic Shibboleth Idp setup.<br>

Making config changes to Apache for mod jk - Revision history

George2 at 12:04, 9 October 2015

George2: Created page with "'''Apache, SSL and mod_jk''' yum install httpd httpd-devel libtool gcc* mod_ssl"