Recent changes to es-install-apache

es-install-apache modified by Humberto Keymur Landeros

Humberto Keymur Landeros — Tue, 13 Oct 2015 20:45:34 -0000

--- v4
+++ v5
@@ -66,5 +66,9 @@
 # reboot
 ~~~~~~

+
+
+
+
  --------------
 [ << OpenBSD ](https://sourceforge.net/p/ixkan/wiki/es-install-openbsd) [| Indice |](https://sourceforge.net/p/ixkan/wiki/es/) [PHP >>](https://sourceforge.net/p/ixkan/wiki/es-install-php)

es-install-apache modified by Humberto Keymur Landeros

Humberto Keymur Landeros — Tue, 13 Oct 2015 19:01:01 -0000

es-install-apache modified by Humberto Keymur Landeros

Humberto Keymur Landeros — Tue, 13 Oct 2015 18:59:32 -0000

--- v2
+++ v3
@@ -47,7 +47,8 @@
 /etc/ssl/private/server.key -out /etc/ssl/server.crt

 Signature ok
-subject =/C=mx/ST=Distrito Federal/L=DF/0=ixkan/0U=firewall/CN=ixkan/ emai1Address=humberto_keymur@ixkan.org.mx
+subject =/C=mx/ST=Distrito Federal/L=DF/0=ixkan/0U=firewall/CN=ixkan/ 
+emai1Address=humberto_keymur@ixkan.org.mx
 Getting Private key
 ~~~~~~
 - - - - - - -

es-install-apache modified by Humberto Keymur Landeros

Humberto Keymur Landeros — Tue, 13 Oct 2015 18:55:35 -0000

--- v1
+++ v2
@@ -11,7 +11,8 @@
 ~~~~~~
 # openssl genrsa -out /etc/ss1/private/server.key 1024
 Generating RSA private key, 1024 bit long Modulus
-+.......++++++ ......................................... ....... ........ ++++++ . ........ ++++++ 
++.......++++++ ......................................... ....... ........ ++++++ .
+........ ++++++ 
 e is 65537 (0x10001)
 ~~~~~~
 - - - - - - -

es-install-apache modified by Humberto Keymur Landeros

Humberto Keymur Landeros — Tue, 13 Oct 2015 18:55:10 -0000

Instalción de Apache

Ixkan funciona como appliance y se comporta como un equipo comercial al ser instalado de esta manera. Esta instalación es ideal para aquellos que desean implementar un firewall desde cero o quieren actualizar su firewall ya implementado.

Certificado SSL para HTTPS

Para asegurar la comunicación entre el cliente y el servidor se utiliza HTTPS en el navegador. Para ello, primero se debe generar un certificado, que se almacena en el directorio /etc/ssl/ con la clave correspondiente en /etc/ssl/private/

# openssl genrsa -out /etc/ss1/private/server.key 1024
Generating RSA private key, 1024 bit long Modulus
+.......++++++ ......................................... ....... ........ ++++++ . ........ ++++++ 
e is 65537 (0x10001)

Ahora se debe generar el certificado

# openssl req -new -key /etc/ss1/private/server.key -out /etc/ssl/private/server.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.' the   field   will be left blank.
----
Country Name (2 letter code) []:mx
State or Province Name (full name) []:Distrito Federal
Locality Nar-ie (eg, city) []:DF
Organization Name (eg, company) []:ixkan
Organizational Unit Name (eg, section) []:firewall
Common Name (eg, fully qualified host name) []:ixkan
Email Address [ ]: humberto_keymur@ixkan.org.mx
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:passwodParaFirmarCertificado
An optional company name []:ixkan.org.mx

Para que la conexión sea cifrada, Apache, debe de contar con un certificado “crt” generado a partir del “crs” y la llave del servidor

# openssl x509 -req -days 365 -in /etc/ssl/private/server.csr -signkey 
/etc/ssl/private/server.key -out /etc/ssl/server.crt

Signature ok
subject =/C=mx/ST=Distrito Federal/L=DF/0=ixkan/0U=firewall/CN=ixkan/ emai1Address=humberto_keymur@ixkan.org.mx
Getting Private key

Para que Apache funcione con HTTPS basta con editar /etc/rc.conf e indicarle que inicie en modo seguro

# use -u to disable chroot, see httpd(8)
#httpd_flags=N0 # for normal use: "" (or "-DSSL" after reading ssl(8))
httpd_flags = "-DSSL"

Reiniciamos para observar el acceso por https.

# reboot

<< OpenBSD | Indice | PHP >>