Personal tools

6.3.4.1. Debian 4.x and Ubuntu 7.xx

Up one level
This section describes how to configure Apache 2.2 for Debian/Ubuntu systems to provide transport layer security for GRIA services.

Install Apache 2.2

Install apache2.2 running the command: sudo apt-get install apache2. This command will try to install additionally the following packages:

  • apache2-mpm-worker
  • apache2-utils
  • apache2.2-common

Apache2.2 Configuration

Edit the default apache configuration as follows:

  1. Enable ssl and proxy_ajp modules by running
    $ sudo a2enmod ssl
    $ sudo a2enmod proxy_ajp.
  2. Copy the sample gria-services.conf file into /etc/apache2/sites-available, and edit it accordingly, i.e. provide the locations of the certificate files previously created using the following parameters:

    • SSLCertificateFile
    • SSLCertificateKeyFile
    • SSLCACertificateFile
    • SSLCARevocationFile (if you have one)

    In addition, according to the GRIA packages you are installing uncomment one or more of the following lines:

    #ProxyPass /gria-basic-app-services ajp://localhost:8009/gria-basic-app-services
    #ProxyPass /gria-client-mgt ajp://localhost:8009/gria-client-mgt
    #ProxyPass /gria-service-provider-mgt ajp://localhost:8009/gria-service-provider-mgt

    Save the changes.

  3. Enable the gria-services.conf virtual host:
    $ sudo a2ensite gria-services.conf
  4. Edit /etc/apache2/ports.conf file to include the following line:
    Listen 443
  5. Edit /etc/apache2/mods-enabled/proxy.conf file and comment out the line:
    Deny from all
  6. Restart apache
    $ sudo /etc/init.d/apache2 force-reload