How To Set Up A Ubuntu LAMP Server

<div dir="ltr" style="text-align: left;" trbidi="on"> <a href="http://www.amazon.com/Ubuntu-Linux-Complete-Edition-8-04/dp/B0018KAN9E?ie=UTF8&tag=widgetsamazon-20&link_code=bil&camp=213689&creative=392969" imageanchor="1" target="_blank"><img alt="Ubuntu Linux Complete Edition 8.04" src="http://ws.amazon.com/widgets/q?MarketPlace=US&ServiceVersion=20070822&ID=AsinImage&WS=1&Format=_SL160_&ASIN=B0018KAN9E&tag=widgetsamazon-20" /></a><img alt="" border="0" height="1" src="http://www.assoc-amazon.com/e/ir?t=widgetsamazon-20&l=bil&camp=213689&creative=392969&o=1&a=B0018KAN9E" style="border: medium none ! important; margin: 0px ! important; padding: 0px ! important;" width="1" /><br /> <b>HTTPD - Apache2 Web Server</b><br /> Apache is the most commonly used Web Server on Linux systems. Web Servers are used to serve Web Pages requested by client computers. Clients typically request and view Web Pages using Web Browser applications such as <b class="application">Firefox</b>, <b class="application">Opera</b>, or <b class="application">Mozilla</b>.<br /> Users enter a Uniform Resource Locator (URL) to point to a Web server by means of its Fully Qualified Domain Name (FQDN) and a path to the required resource. For example, to view the home page of the <a href="http://www.ubuntu.com/" target="_top">Ubuntu Web site</a> a user will enter only the FQDN. To request specific information about <a href="http://www.ubuntu.com/support/paid" target="_top">paid support</a>, a user will enter the FQDN followed by a path.<br /> The most common protocol used to transfer Web pages is the Hyper Text Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a protocol for uploading and downloading files, are also supported.<br /> Apache Web Servers are often used in combination with the <b class="application">MySQL</b> database engine, the HyperText Preprocessor (<b class="application">PHP</b>) scripting language, and other popular scripting languages such as <b class="application">Python</b> and <b class="application">Perl</b>. This configuration is termed LAMP (Linux, Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform for the development and deployment of Web-based applications.<br /> <div class="sect2" lang="C"> <div class="titlepage"> <div> <div> <h3 class="title"> Installation</h3> </div> </div> </div> The Apache2 web server is available in Ubuntu Linux. To install Apache2:<br /> <div class="procedure"> <ul> <li> At a terminal prompt enter the following command: <br /> <pre class="screen"><b class="command">sudo apt-get install apache2</b></pre> <br /> </li> </ul> </div> </div> <div class="sect2" lang="C"> <div class="titlepage"> <div> <div> <h3 class="title"> Configuration</h3> </div> </div> </div> Apache is configured by placing <span class="emphasis"><i>directives</i></span> in plain text configuration files. The main configuration file is called <code class="filename">apache2.conf</code>. In addition, other configuration files may be added using the <span class="emphasis"><i>Include</i></span> directive, and wildcards can be used to include many configuration files. Any directive may be placed in any of these configuration files. Changes to the main configuration files are only recognized by Apache2 when it is started or restarted.<br /> The server also reads a file containing mime document types; the filename is set by the <span class="emphasis"><i>TypesConfig</i></span> directive, and is <code class="filename">mime.types</code> by default.<br /> The default Apache2 configuration file is <code class="filename">/etc/apache2/apache2.conf</code> . You can edit this file to configure the Apache2 server. You can configure the port number, document root, modules, log files, virtual hosts, etc. <br /> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Basic Settings</h4> </div> </div> </div> This section explains Apache2 server essential configuration parameters. Refer to the <a href="http://httpd.apache.org/docs/2.0/" target="_top">Apache2 Documentation</a> for more details.<br /> <div class="itemizedlist"> <ul type="disc"> <li> Apache2 ships with a virtual-host-friendly default configuration. That is, it is configured with a single default virtual host (using the <span class="emphasis"><i>VirtualHost</i></span> directive) which can modified or used as-is if you have a single site, or used as a template for additional virtual hosts if you have multiple sites. If left alone, the default virtual host will serve as your default site, or the site users will see if the URL they enter does not match the <span class="emphasis"><i>ServerName</i></span> directive of any of your custom sites. To modify the default virtual host, edit the file <code class="filename">/etc/apache2/sites-available/default</code>. If you wish to configure a new virtual host or site, copy that file into the same directory with a name you choose. For example, <b class="command">sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-available/mynewsite</b> Edit the new file to configure the new site using some of the directives described below. <br /> </li> <li> The <span class="emphasis"><i>ServerAdmin</i></span> directive specifies the email address to be advertised for the server's administrator. The default value is webmaster@localhost. This should be changed to an email address that is delivered to you (if you are the server's administrator). If your website has a problem, Apache2 will display an error message containing this email address to report the problem to. Find this directive in your site's configuration file in /etc/apache2/sites-available. <br /> </li> <li> The <span class="emphasis"><i>Listen</i></span> directive specifies the port, and optionally the IP address, Apache2 should listen on. If the IP address is not specified, Apache2 will listen on all IP addresses assigned to the machine it runs on. The default value for the Listen directive is 80. Change this to 127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so that it will not be available to the Internet, to (for example) 81 to change the port that it listens on, or leave it as is for normal operation. This directive can be found and changed in its own file, <code class="filename">/etc/apache2/ports.conf</code> <br /> </li> <li> The <span class="emphasis"><i>ServerName</i></span> directive is optional and specifies what FQDN your site should answer to. The default virtual host has no ServerName directive specified, so it will respond to all requests that do not match a ServerName directive in another virtual host. If you have just acquired the domain name ubunturocks.com and wish to host it on your Ubuntu server, the value of the ServerName directive in your virtual host configuration file should be ubunturocks.com. Add this directive to the new virtual host file you created earlier (<code class="filename">/etc/apache2/sites-available/mynewsite</code>). <br /> <div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Tip"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Tip]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/tip.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">You may also want your site to respond to www.ubunturocks.com, since many users will assume the www prefix is appropriate. Use the <span class="emphasis"><i>ServerAlias</i></span> directive for this. You may also use wildcards in the ServerAlias directive. For example, <b class="command">ServerAlias *.ubunturocks.com</b> will cause your site to respond to any domain request ending in .ubunturocks.com. </td> </tr> </tbody></table> </div> <br /> </li> <li> The <span class="emphasis"><i>DocumentRoot</i></span> directive specifies where Apache should look for the files that make up the site. The default value is /var/www. No site is configured there, but if you uncomment the <span class="emphasis"><i>RedirectMatch</i></span> directive in <code class="filename">/etc/apache2/apache2.conf</code> requests will be redirected to /var/www/apache2-default where the default Apache2 site awaits. Change this value in your site's virtual host file, and remember to create that directory if necessary! <br /> </li> </ul> </div> <div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Tip"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Tip]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/tip.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">The /etc/apache2/sites-available directory is <span class="bold"><b> not</b></span> parsed by Apache2. Symbolic links in /etc/apache2/sites-enabled point to "available" sites. Use the a2ensite (Apache2 Enable Site) utility to create those symbolic links, like so: <b class="command">sudo a2ensite mynewsite</b> where your site's configuration file is <code class="filename"> /etc/apache2/sites-available/mynewsite</code>. Similarly, the a2dissite utility should be used to disable sites. </td> </tr> </tbody></table> </div> </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Default Settings</h4> </div> </div> </div> This section explains configuration of the Apache2 server default settings. For example, if you add a virtual host, the settings you configure for the virtual host take precedence for that virtual host. For a directive not defined within the virtual host settings, the default value is used. <br /> <div class="itemizedlist"> <ul type="disc"> <li> The <span class="emphasis"><i>DirectoryIndex</i></span> is the default page served by the server when a user requests an index of a directory by specifying a forward slash (/) at the end of the directory name.<br /> For example, when a user requests the page http://www.example.com/this_directory/, he or she will get either the DirectoryIndex page if it exists, a server-generated directory list if it does not and the Indexes option is specified, or a Permission Denied page if neither is true. The server will try to find one of the files listed in the DirectoryIndex directive and will return the first one it finds. If it does not find any of these files and if Options Indexes is set for that directory, the server will generate and return a list, in HTML format, of the subdirectories and files in the directory. The default value, found in <code class="filename">/etc/apache2/apache2.conf</code> is " index.html index.cgi index.pl index.php index.xhtml". Thus, if Apache2 finds a file in a requested directory matching any of these names, the first will be displayed. <br /> </li> <li> The <span class="emphasis"><i>ErrorDocument</i></span> directive allows you to specify a file for Apache to use for specific error events. For example, if a user requests a resource that does not exist, a 404 error will occur, and per Apache2's default configuration, the file <code class="filename">/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </code> will be displayed. That file is not in the server's DocumentRoot, but there is an Alias directive in <code class="filename">/etc/apache2/apache2.conf</code> that redirects requests to the /error directory to /usr/share/apache2/error/. To see a list of the default ErrorDocument directives, use this command: <b class="command">grep ErrorDocument /etc/apache2/apache2.conf</b> <br /> </li> <li> By default, the server writes the transfer log to the file /var/log/apache2/access.log. You can change this on a per-site basis in your virtual host configuration files with the <span class="emphasis"><i>CustomLog</i></span> directive, or omit it to accept the default, specified in <code class="filename"> /etc/apache2/apache2.conf</code>. You may also specify the file to which errors are logged, via the <span class="emphasis"><i>ErrorLog</i></span> directive, whose default is <code class="filename">/var/log/apache2/error.log</code>. These are kept separate from the transfer logs to aid in troubleshooting problems with your Apache2 server. You may also specify the <span class="emphasis"><i>LogLevel</i></span> (the default value is "warn") and the <span class="emphasis"><i>LogFormat</i></span> (see <code class="filename"> /etc/apache2/apache2.conf</code> for the default value). <br /> </li> <li> Some options are specified on a per-directory basis rather than per-server. Option is one of these directives. A Directory stanza is enclosed in XML-like tags, like so: <br /> <pre class="screen"><b class="command"><directory mynewsite="" var="" www=""> ... </directory></b> </pre> The Options directive within a Directory stanza accepts one or more of the following values (among others), separated by spaces: <br /> <div class="itemizedlist"> <ul compact="compact" type="circle"> <li> <span class="bold"><b>ExecCGI</b></span> - Allow execution of CGI scripts. CGI scripts are not executed if this option is not chosen. <br /> <div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Tip"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Tip]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/tip.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">Most files should not be executed as CGI scripts. This would be very dangerous. CGI scripts should kept in a directory separate from and outside your DocumentRoot, and only this directory should have the ExecCGI option set. This is the default, and the default location for CGI scripts is /usr/lib/cgi-bin. </td> </tr> </tbody></table> </div> <br /> </li> <li> <span class="bold"><b>Includes</b></span> - Allow server-side includes. Server-side includes allow an HTML file to <span class="emphasis"><i> include</i></span> other files. This is not a common option. See <a href="http://httpd.apache.org/docs/2.0/howto/ssi.html" target="_top">the Apache2 SSI Howto</a> for mor information.<br /> </li> <li> <span class="bold"><b>IncludesNOEXEC</b></span> - Allow server-side includes, but disable the #exec and #include commands in CGI scripts.<br /> </li> <li> <span class="bold"><b>Indexes</b></span> - Display a formatted list of the directory's contents, if no DirectoryIndex (such as index.html) exists in the requested directory. <br /> <div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Caution"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Caution]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/caution.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">For security reasons, this should usually not be set, and certainly should not be set on your DocumentRoot directory. Enable this option carefully on a per-directory basis only if you are certain you want users to see the entire contents of the directory.</td> </tr> </tbody></table> </div> <br /> </li> <li> <span class="bold"><b>Multiview</b></span> - Support content-negotiated multiviews; this option is disabled by default for security reasons. See the <a href="http://httpd.apache.org/docs/2.0/mod/mod_negotiation.html#multiviews" target="_top">Apache2 documentation on this option</a>. <br /> </li> <li> <span class="bold"><b>SymLinksIfOwnerMatch</b></span> - Only follow symbolic links if the target file or directory has the same owner as the link. <br /> </li> </ul> </div> </li> </ul> </div> </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Virtual Hosts Settings</h4> </div> </div> </div> Virtual hosts allow you to run different servers for different IP addresses, different host names, or different ports on the same machine. For example, you can run the website for http://www.example.com and http://www.anotherexample.com on the same Web server using virtual hosts. This option corresponds to the <virtualhost> directive for the default virtual host and IP-based virtual hosts. It corresponds to the <namevirtualhost> directive for a name-based virtual host. </namevirtualhost></virtualhost><br /> The directives set for a virtual host only apply to that particular virtual host. If a directive is set server-wide and not defined within the virtual host settings, the default setting is used. For example, you can define a Webmaster email address and not define individual email addresses for each virtual host. <br /> Set the DocumentRoot directive to the directory that contains the root document (such as index.html) for the virtual host. The default DocumentRoot is <code class="filename">/var/www</code>. <br /> The ServerAdmin directive within the VirtualHost stanza is the email address used in the footer of error pages if you choose to show a footer with an email address on the error pages. </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Server Settings</h4> </div> </div> </div> This section explains how to configure basic server settings.<br /> <span class="bold"><b>LockFile</b></span> - The LockFile directive sets the path to the lockfile used when the server is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be stored on the local disk. It should be left to the default value unless the logs directory is located on an NFS share. If this is the case, the default value should be changed to a location on the local disk and to a directory that is readable only by root. <br /> <span class="bold"><b>PidFile</b></span> - The PidFile directive sets the file in which the server records its process ID (pid). This file should only be readable by root. In most cases, it should be left to the default value.<br /> <span class="bold"><b>User</b></span> - The User directive sets the userid used by the server to answer requests. This setting determines the server's access. Any files inaccessible to this user will also be inaccessible to your website's visitors. The default value for User is www-data. <br /> <div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Warning"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Warning]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/warning.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">Unless you know exactly what you are doing, do not set the User directive to root. Using root as the User will create large security holes for your Web server. </td> </tr> </tbody></table> </div> The Group directive is similar to the User directive. Group sets the group under which the server will answer requests. The default group is also www-data.</div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Apache Modules</h4> </div> </div> </div> Apache is a modular server. This implies that only the most basic functionality is included in the core server. Extended features are available through modules which can be loaded into Apache. By default, a base set of modules is included in the server at compile-time. If the server is compiled to use dynamically loaded modules, then modules can be compiled separately, and added at any time using the LoadModule directive. Otherwise, Apache must be recompiled to add or remove modules. Ubuntu compiles Apache2 to allow the dynamic loading of modules. Configuration directives may be conditionally included on the presence of a particular module by enclosing them in an <ifmodule> block. You can install additional Apache2 modules and use them with your Web server. You can install Apache2 modules using the <b class="application">apt-get</b> command. For example, to install the Apache2 module for MYSQL authentication, you can run the following command from a terminal prompt:</ifmodule><br /> <br /> <pre class="screen"><b class="command">sudo apt-get install libapache2-mod-auth-mysql</b></pre> <br /> Once you install the module, the module will be available in the <code class="filename">/etc/apache2/mods-available</code> directory. You can use the <b class="application">a2enmod</b> command to enable a module. You can use the <b class="application">a2dismod</b> command to disable a module. Once you enable the module, the module will be available in the the <code class="filename">/etc/apache2/mods-enabled</code> directory. </div> </div> <div class="sect2" lang="C"> <div class="titlepage"> <div> <div> <h3 class="title"> HTTPS Configuration</h3> </div> </div> </div> The <b class="application">mod_ssl</b> module adds an important feature to the Apache2 server - the ability to encrypt communications. Thus, when your browser is communicating using SSL encryption, the https:// prefix is used at the beginning of the Uniform Resource Locator (URL) in the browser navigation bar. <br /> The <b class="application">mod_ssl</b> module is available in <b class="application">apache2-common</b> package. If you have installed this package, you can run the following command from a terminal prompt to enable the <b class="application">mod_ssl</b> module: <br /> <br /> <pre class="screen"><b class="command">sudo a2enmod ssl</b></pre> <br /> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Certificates and Security</h4> </div> </div> </div> To set up your secure server, use public key cryptography to create a public and private key pair. In most cases, you send your certificate request (including your public key), proof of your company's identity, and payment to a Certificate Authority (CA). The CA verifies the certificate request and your identity, and then sends back a certificate for your secure server. <br /> Alternatively, you can create your own self-signed certificate. Note, however, that self-signed certificates should not be used in most production environments. Self-signed certificates are not automatically accepted by a user's browser. Users are prompted by the browser to accept the certificate and create the secure connection. <br /> Once you have a self-signed certificate or a signed certificate from the CA of your choice, you need to install it on your secure server. </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Types of Certificates</h4> </div> </div> </div> You need a key and a certificate to operate your secure server, which means that you can either generate a self-signed certificate or purchase a CA-signed certificate. A CA-signed certificate provides two important capabilities for your server: <br /> <div class="itemizedlist"> <ul type="disc"> <li> Browsers (usually) automatically recognize the certificate and allow a secure connection to be made without prompting the user. <br /> </li> <li> When a CA issues a signed certificate, it is guaranteeing the identity of the organization that is providing the web pages to the browser. <br /> </li> </ul> </div> Most Web browsers that support SSL have a list of CAs whose certificates they automatically accept. If a browser encounters a certificate whose authorizing CA is not in the list, the browser asks the user to either accept or decline the connection. <br /> You can generate a self-signed certificate for your secure server, but be aware that a self-signed certificate does not provide the same functionality as a CA-signed certificate. A self-signed certificate is not automatically recognized by most Web browsers, and a self-signed certificate does not provide any guarantee concerning the identity of the organization that is providing the website. A CA-signed certificate provides both of these important capabilities for a secure server. The process of getting a certificate from a CA is fairly easy. A quick overview is as follows: <br /> <div class="orderedlist"> <ol type="1"> <li> Create a private and public encryption key pair.<br /> </li> <li> Create a certificate request based on the public key. The certificate request contains information about your server and the company hosting it.<br /> </li> <li> Send the certificate request, along with documents proving your identity, to a CA. We cannot tell you which certificate authority to choose. Your decision may be based on your past experiences, or on the experiences of your friends or colleagues, or purely on monetary factors.<br /> Once you have decided upon a CA, you need to follow the instructions they provide on how to obtain a certificate from them.<br /> </li> <li> When the CA is satisfied that you are indeed who you claim to be, they send you a digital certificate.<br /> </li> <li> Install this certificate on your secure server, and begin handling secure transactions. <br /> </li> </ol> </div> Whether you are getting a certificate from a CA or generating your own self-signed certificate, the first step is to generate a key. </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Generating a Certificate Signing Request (CSR)</h4> </div> </div> </div> To generate the Certificate Signing Request (CSR), you should create your own key. You can run the following command from a terminal prompt to create the key: <br /> <br /> <pre class="screen"><b class="command">openssl genrsa -des3 -out server.key 1024</b></pre> <br /> <pre class="programlisting">Generating RSA private key, 1024 bit long modulus .....................++++++ .................++++++ unable to write 'random state' e is 65537 (0x10001) Enter pass phrase for server.key:</pre> You can now enter your passphrase. For best security, it should at least contain eight characters. The minimum length when specifying -des3 is four characters. It should include numbers and/or punctuation and not be a word in a dictionary. Also remember that your passphrase is case-sensitive. <br /> Re-type the passphrase to verify. Once you have re-typed it correctly, the server key is generated and stored in <code class="filename">server.key</code> file. <br /> <div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Warning"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Warning]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/warning.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">You can also run your secure web server without a passphrase. This is convenient because you will not need to enter the passphrase every time you start your secure web server. But it is highly insecure and a compromise of the key means a compromise of the server as well. </td> </tr> </tbody></table> </div> In any case, you can choose to run your secure web server without a passphrase by leaving out the -des3 switch in the generation phase or by issuing the following command at a terminal prompt: <br /> <br /> <pre class="screen"><b class="command">openssl rsa -in server.key -out server.key.insecure</b></pre> <br /> Once you run the above command, the insecure key will be stored in the <code class="filename">server.key.insecure</code> file. You can use this file to generate the CSR without passphrase. <br /> To create the CSR, run the following command at a terminal prompt: <br /> <br /> <pre class="screen"><b class="command">openssl req -new -key server.key -out server.csr</b></pre> <br /> It will prompt you enter the passphrase. If you enter the correct passphrase, it will prompt you to enter Company Name, Site Name, Email Id, etc. Once you enter all these details, your CSR will be created and it will be stored in the <code class="filename">server.csr</code> file. You can submit this CSR file to a CA for processing. The CAN will use this CSR file and issue the certificate. On the other hand, you can create self-signed certificate using this CSR.</div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Creating a Self-Signed Certificate</h4> </div> </div> </div> To create the self-signed certificate, run the following command at a terminal prompt: <br /> <br /> <pre class="screen"><b class="command">openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt</b></pre> <br /> The above command will prompt you to enter the passphrase. Once you enter the correct passphrase, your certificate will be created and it will be stored in the <code class="filename">server.crt</code> file. <br /> <div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Warning"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Warning]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/warning.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">If your secure server is to be used in a production environment, you probably need a CA-signed certificate. It is not recommended to use self-signed certificate. </td> </tr> </tbody></table> </div> </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Installing the Certificate</h4> </div> </div> </div> You can install the key file <code class="filename">server.key</code> and certificate file <code class="filename">server.crt</code> or the certificate file issued by your CA by running following commands at a terminal prompt: <br /> <br /> <pre class="screen"><b class="command">sudo cp server.crt /etc/ssl/certs</b> <b class="command">sudo cp server.key /etc/ssl/private</b></pre> <br /> You should add the following four lines to the <code class="filename">/etc/apache2/sites-available/default</code> file or the configuration file for your secure virtual host. You should place them in the <span class="emphasis"><i>VirtualHost</i></span> section. They should be placed under the <span class="emphasis"><i>DocumentRoot</i></span> line: <br /> <pre class="programlisting">SSLEngine on SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire SSLCertificateFile /etc/ssl/certs/server.crt SSLCertificateKeyFile /etc/ssl/private/server.key</pre> HTTPS should listen on port number 443. You should add the following line to the <code class="filename">/etc/apache2/ports.conf</code> file: <br /> <pre class="programlisting">Listen 443</pre> </div> <div class="sect3" lang="C"> <div class="titlepage"> <div> <div> <h4 class="title"> Accessing the Server</h4> </div> </div> </div> Once you install your certificate, you should restart your web server. You can run the following command at a terminal prompt to restart your web server: <br /> <br /> <pre class="screen"><b class="command">sudo /etc/init.d/apache2 restart</b> </pre> <br /> <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> <table border="0" summary="Note"><tbody> <tr> <td align="center" rowspan="2" valign="top" width="25"><img alt="[Note]" src="https://help.ubuntu.com/6.10/ubuntu/images/admon/note.png" /> </td> <th align="left"><br /></th> </tr> <tr> <td align="left" valign="top">You should remember and enter the passphrase every time you start your secure web server. </td> </tr> </tbody></table> </div> You will be prompted to enter the passphrase. Once you enter the correct passphrase, the secure web server will be started. You can access the secure server pages by typing https://your_hostname/url/ in your browser address bar.</div> </div> </div>

How To Set Up A Ubuntu LAMP Server

HTTPD - Apache2 Web Server Apache is the most commonly used Web Server on Linux systems. Web Servers are used to serve Web Page...

Read more »