Apache Web Server System Description

(1)

Apache Web Server

System Description

Version 2.x 2011-01-13 SEAL Systems

(2)

Copyright

This document and all its parts are protected by copyright. Their use without prior written consent by SEAL Systems is prohibited and subject to prosecution. In particular, this applies to reproduction, translation, microfilming and the storing and processing in electronic systems.

Customers that currently own a valid SEAL Systems software license for the product(s) described within the contents of this documentation, may freely distribute this documen-tation in electronic form (e. g. CD/file server or intranet) for internal usage only. All product names mentioned are the registered trademarks of the associated companies.

Lohmühlweg 4 D91341 Röttenbach Germany

(3)

Contents 3

SEAL Systems 2008-09-09 Base Configuration of DMS Modules

www.sealsystems.com Version 1.2.4 System Description

1 Introduction

...

purpose

This documentation describes the configuration of the Apache Web Servers in the installations of SEAL Systems.

...

target group

This documentation is intended for use by both system administrators and Tech-nical Project Managers at SEAL Systems who want to customize the configura-tion of the Apache Web Server.

...

available Apache Web Servers

The following Apache Web Servers can be available in the installations of SEAL Systems:

• Apache for DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center

• ApacheDire for DPF Director

• ApacheOcon for PLOSSYS OCON

...

reference

For more information about the specific products from SEAL Systems, refer to the correspondent product documentations.

...

in this chapter

This chapter deals with the following topics:

...

Topic Page

Conventions in this Documentation 6

(6)

6 1 Introduction

Apache Web Server 2011-01-13 SEAL Systems

System Description Version 2.x www.sealsystems.com

Conventions in this Documentation

...

path specification The path information given in this documentation is relative to the installation directory of PLOSSYS netdome. This is usually the home directory of the

plossys user. The path information is indicated in Windows notation only in

most cases. This corresponds to the UNIX directory structures unless noted otherwise.

...

typography The following table lists the typographical conventions employed in this docu-mentation for file names, paths, variables, etc.

...

Typographical Convention

Meaning

Courier _{File names, paths, commands, menu items, keywords,}

special values, short scripts and examples

Courier italic _{Parameters; variables that must be replaced by current}

values

(7)

1 Introduction 7

Overview of Contents

...

Content

The documentation deals with the following topics:

Chapter 2, Configuration of Port Number, page 8, describes how you configure the port numbers for the different Apache Web Servers.

Chapter 3, Change to Secure Connection, page 12, describes how you change the different Apache Web Servers to HTTPS.

...

lists

At the end of the documentation, a bibliography, terminology list, abbreviation list, keyword list and index are included.

(8)

8 2 Configuration of Port Number

2 Configuration of Port Number

...

in this chapter This chapter deals with the following topics:

...

reference Which port numbers are used for which purposes in SEAL Systems products by default is described in [PORTNUMBERS_TEC].

...

Topic Page

Configure the Port Number (DPF Director) 9

Configure the Port Number (PLOSSYS OCON) 10

(9)

2 Configuration of Port Number 9

Configure the Port Number (DPF Director)

...

instructions

This is how you configure the port number for the Apache Web Server for DPF Director:

...

result

The DPF Director client can connect to the server with the Web port number.

...

hint

Which port number has been used when starting the Apache Web Server for DPF Director, is displayed with sysstart director and with sysstatus director.

...

hint ddinst is also called after answering y to Execute DPF Director

configura-tion? in setplossyscfg.

...

Step Action

1 Stop the DPF Director server with sysstop director.

2 Call ddinst and enter the desired port number at Please specify Webport.

(10)

10 2 Configuration of Port Number

Configure the Port Number (PLOSSYS OCON)

...

instructions This is how you configure the port number for the Apache Web Server for PLOSSYS OCON:

...

result The PLOSSYS OCON client can connect to the server with the Web port number.

...

hint Which port number has been used when starting the Apache Web Server for PLOSSYS OCON, is displayed with sysstart ocon and with sysstatus ocon.

...

hint oconinst is also called after answering y to Execute PLOSSYS OCON config-uration? in setplossyscfg.

...

Step Action

1 Stop the PLOSSYS OCON server with sysstop ocon.

2 Call oconinst and enter the desired port number at Please

specify Webport.

(11)

2 Configuration of Port Number 11

Configure the Port Number (Other SEAL Systems

Products)

...

instructions

This is how you configure the port number for the Apache Web Server for DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center::

...

result

DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center can connect to the server with the Web port number and, if configured, with the HTTPS port number.

...

hint

Which port number has been used when starting the Apache Web Server, is displayed with sysstart apache and with sysstatus apache.

...

Step Action

1 Stop the Apache Web Server with sysstop apache.

2 Call setplossyscfg and specify y at Configure Apache Web

server (for PLOSSYS Webclient, PLOSSYS Webportal, DPF Tracker, SEALCC)?.

3 Enter the desired Web port number at Please enter value for

WEBPORT.

4 If you are using both the secure (HTTPS) and the open (HTTP)

connection, enter the desired HTTPS port number at Enter the SSL port (Secure connection).

(12)

12 3 Change to Secure Connection

3 Change to Secure Connection

...

HTTP/HTTPS An Apache Web Server can be configured with an open port (HTTP) and/or a secure port (HTTPS).

...

SSL certificate For the secure connection, you need an SSL certificate.

...

hint An Apache Web Server with a secure port requires more computing time than one with an open port.

...

in this chapter This chapter deals with the following topics:

...

Topic Page

Request an SSL Certificate 13

Change to HTTPS (DPF Director) 14

Change to HTTPS (PLOSSYS OCON) 15

Change to HTTPS (Other SEAL Systems Products) 16

Change to HTTPS and HTTP (Other SEAL Systems Products) 17

Accept SSL Certificate in the Web Browser 18

(13)

3 Change to Secure Connection 13

Request an SSL Certificate

...

SEAL Systems

On request, you receive the SSL certificate from your Technical Project Manager at SEAL Systems.

...

required informa-tion

Give the following information to SEAL Systems:

• Company

• Department

• City

• Country

• Country token according to ISO

• Name of the server where the Web server is running • E-mail address of the contact person

• Validity period of the certificate

...

SSL certificate

The SSL certificate consists of the name.crt and name.key files.

(14)

Change to HTTPS (DPF Director)

...

instructions This is how you change the Apache Web Server for DPF Director to the secure connection (HTTPS):

...

result The DPF Director client can connect to the DPF Director server with https:// host:web_port only.

...

hint In order to change the Apache Web Server for DPF Director back to HTTP, stop the DPF Director server, delete the two certificate files, seal.crt and seal.key

(or rename them to seal.crtoff and seal.keyoff for example) and restart the

DPF Director server.

...

hint If the Apache Web Server for DPF Director has been started in the secure or in the open mode, is displayed with sysstart director and with sysstatus director.

...

Step Procedure

1 Stop the DPF Director server with sysstop director.

2 Copy the certification files, name.crt and name.key, to the server\director\apache\conf\ssl directory on the server

where the Apache Web Server for DPF Director is running. 3 Rename the files to seal.crt and seal.key.

(15)

Change to HTTPS (PLOSSYS OCON)

...

instructions

This is how you change the Apache Web Server for PLOSSYS OCON to the secure connection (HTTPS):

...

result

The PLOSSYS OCON client can connect to the PLOSSYS OCON server with

https://host:web_port only.

...

hint

In order to change the Apache Web Server for PLOSSYS OCON back to HTTP, stop the PLOSSYS OCON server, delete the two certificate files, seal.crt and seal.key (or rename them to seal.crtoff and seal.keyoff for example) and

restart the PLOSSYS OCON server.

...

hint

If the Apache Web Server for PLOSSYS OCON has been started in the secure or in the open mode, is displayed with sysstart ocon and with sysstatus ocon.

...

1 Stop the PLOSSYS OCON server with sysstop ocon.

2 Copy the certification files, name.crt and name.key, to the server\ocon\apache\conf\ssl directory on the server where the

Apache Web Server for PLOSSYS OCON is running. 3 Rename the files to seal.crt and seal.key.

(16)

Change to HTTPS (Other SEAL Systems

Prod-ucts)

...

instructions This is how you change the Apache Web Server for DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center to the secure connection (HTTPS):

...

result DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center can connect to the server with https://host:web_port only.

...

hint In order to change the Apache Web Server back to HTTP, open the configuration of Apache Web Server in setplossyscfg again and specify n at Should the Web server support the secure HTTPS protocol?.

...

hint If the Apache Web Server has been started in the secure or in the open mode, is displayed with sysstart apache and with sysstatus apache.

...

3 Specify y at Should the Web server support the secure

HTTPS protocol?.

4 Specify the name of the SSL certificate file, .crt, at Enter the SSL certificate file.

5 Specify y at Allow access via HTTPS only?.

(17)

Change to HTTPS and HTTP (Other SEAL

Systems Products)

...

instructions

This is how you change the Apache Web Server for DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center to the open (HTTP) and the secure connections (HTTPS):

...

result

DPF Tracker, PLOSSYS Webclient, PLOSSYS Webportal and SEAL Control Center can connect to the server with the secure connection, https:// host:ssl_port, or the open connection, http://host:web_port.

...

hint

If the Apache Web Server has been started in the secure and/or in the open mode, is displayed with sysstart apache and with sysstatus apache.

...

3 Specify y at Should the Web server support the secure

HTTPS protocol?.

4 Specify the name of the SSL certificate file, .crt, at Enter the SSL certificate file.

5 Specify n at Allow access via HTTPS only?.

6 Specify the port for the secure connection via HTTPS at Enter the SSL port (secure connection).

(18)

Accept SSL Certificate in the Web Browser

...

instructions This is how you accept the SSL certificate in the Web browser:

...

example This is how you accept the SSL certificate in Mozilla Firefox:

...To be continued

1 In the Web browser, call https://host:web_port.

2 Follow the instructions in the Web browser in order to import the SSL certificate and to accept it.

(19)

Accept SSL Certificate in the Web Browser

, Continu-ation

...

example, continuation

(20)

Accept SSL Certificate in the Web Browser

, Continu-ation

...

example, continuation

(21)

Call Client Via Secure Connection (HTTPS)

...

URL

In the URL of the client, specify https://host:ssl_port instead of http:// host:web_port.

(22)

22 Bibliography

Bibliography

...

[DPF_TEC] DPF, System Description, SEAL Systems

[NETDOME_TEC] PLOSSYS® netdome, System Description, SEAL Systems

[NWC_INS] NWC, Installation Guide, SEAL Systems

[OCON_INS] PLOSSYS® OCON, Installation Guide, SEAL Systems

[PORTNUMBERS_TEC] Port Numbers at SEAL Systems, System Description, SEAL

Systems

[SEALCC_TEC] SEAL Control Center, System Description, SEAL Systems

[SYSTEMSTATUS_TEC] System Status, System Description, SEAL Systems

[WEBPORTAL_TEC] PLOSSYS Webportal, System Description, SEAL Systems

(23)

Terminology 23

Terminology

...

The following section explains the most important terms that are used in this documentation. Terms marked by → refer to other terms within this section.

Apache →Web server for →PLOSSYS OCON, →DPF Director, →DPF Tracker,

→PLOSSYS Webclient, →PLOSSYS Webportal and →SEAL Control

Center

DPF Director Graphical user interface for editing and generating working units and

processes in the DPF system DPF Director client →DPF Director's user interface DPF Director’s user interface

Graphical user interface of →DPF Director; communicates with the DPF Director server

DPF Director server Communicates with the DPF Director’s user interface and the DPF system; contains the Apache →Web server and the →Tomcat server

DPF Tracker Graphical user interface for tracking jobs in a DPF system

PLOSSYS OCON Administrator and operator console providing functionality to administrate output devices, jobs and stations of PLOSSYS netdome systems

PLOSSYS OCON client

→PLOSSYS OCON’s user interface

PLOSSYS OCON’s User Interface

Graphical user interface of →PLOSSYS OCON; communicates with the PLOSSYS OCON server

PLOSSYS OCON server

Communicates with the PLOSSYS OCON’s user interface and PLOSSYS Infoserver of the PLOSSYS netdome systems; contains the Apache →Web server and the →Tomcat server

PLOSSYS Webclient Client for archive, output and user functions PLOSSYS Webportal Electronic data distribution via a Web server

SEAL Control Center Central, web-based user interface in plug-in technology for administrating SEAL Systems applications easily

Servlet →Java program which runs on the Web server

Tomcat A servlet engine

Web server Communication server based on Web technology

(24)

24 Abbreviations

Abbreviations

...

DPF® Digital Process Factory from SEAL Systems

HTTP Hypertext Transfer Protocol

HTTPS Hypertext Transfer Protocol Secure

NWC PLOSSYS Webclient

PLOSSYS® Product family by SEAL Systems

SEALCC SEAL Control Center from SEAL Systems

SSL Secure Sockets Layer

(25)

Index 25

SEAL Systems 2008-01-01 PLOSSYS netdome

www.sealsystems.com Version 1.0.0 User Manual

Index

Symbols

.crt 13 .key 13

A

Apache 5, 23 Apache Web server

available 5

open connection 12 secure connection 12 ApacheDire 5

ApacheOcon 5

available Apache Web servers 5

C

call client via secure connection 21 certificate

accept 18 files 13, 14

for secure connection 12 request 13

server 13

validity period 13 connection

for DPF Director, view 14 for DPF Tracker, view 16 for PLOSSYS OCON, view 15 for PLOSSYS Webclient, view 16 for PLOSSYS Webportal, view 16 for SEAL Control Center, view 16

D

ddinst 9

default port number 8 DPF Director 5, 23

configure port number 9 configure secure connection 14 secure connection 14

view connection 14 view port number 9

DPF Director client, see DPF Director's user in-terface

DPF Director server 23

DPF Director’s user interface 23 DPF Tracker 5, 23

configure port number 11

configure secure and open connection 17 configure secure connection 16

secure connection 16

H

HTTP 24

HTTP, see also open connection HTTPS 24

HTTPS port number 11

HTTPS, see also secure connection

N

NWC 24

O

oconinst 10 open connection 12

P

PLOSSYS OCON 5, 23 configure port number 10 configure secure connection 15 secure connection 15

PLOSSYS OCON client, see PLOSSYS OCON's user interface

PLOSSYS OCON server 23

PLOSSYS OCON’s user interface 23 PLOSSYS Webclient 5, 23

secure connection 16 view connection 16 view port number 11 PLOSSYS Webportal 5, 23

secure connection 16 view connection 16 view port number 11 port number

default 8

for DPF Director, configure 9 for DPF Director, view 9 for DPF Tracker, configure 11 for DPF Tracker, view 11

for PLOSSYS OCON, configure 10 for PLOSSYS OCON, view 10

(26)

26 Index

PLOSSYS netdome 2008-01-01 SEAL Systems

User Manual Version 1.0.0 www.sealsystems.com

for PLOSSYS Webclient, configure 11 for PLOSSYS Webclient, view 11 for PLOSSYS Webportal, configure 11 for PLOSSYS Webportal, view 11 for SEAL Control Center, configure 11 for SEAL Control Center, view 11

S

SEAL Control Center 5, 23 configure port number 11

deactivate secure connection 16 view connection 16

view port number 11

SEAL Systems product, default port numbers in 8

SEALCC 24

secure and open connection for DPF Tracker, configure 17

for PLOSSYS Webclient, configure 17 for PLOSSYS Webportal, configure 17 for SEAL Control Center, configure 17 secure connection 12

accept certificate 18 call client via 21 certificate 12

for DPF Director, configure 14 for DPF Director, deactivate 14 for DPF Tracker, configure 16 for DPF Tracker, deactivate 16 for PLOSSYS OCON, configure 15 for PLOSSYS OCON, deactivate 15 for PLOSSYS Webclient, configure 16 for PLOSSYS Webclient, deactivate 16 for PLOSSYS Webportal, configure 16 for PLOSSYS Webportal, deactivate 16 for SEAL Control Center, configure 16 for SEAL Control Center, deactivate 16 request certificate 13

server of certificate 13 servlet 23

setplossyscfg 9, 10 SSL 24

SSL certificate, see certificate SSL port number 17

T

Tomcat 23

V

validity period of certificate 13

W

Web browser, accept certificate 18 Web port number 11