HP OpenVMS Systems

 

 

HP Secure Web Server for OpenVMS (based on Apache)
Version 2.1 Installation and Configuration Guide

 

November 2005

 

Version 2.1 for OpenVMS Alpha, based on Apache 2.0.52
CPQ-AXPVMS-CSWS-V0201--1.PCSI_SFX_AXPEXE

 

Version 2.1 for OpenVMS I64, based on Apache 2.0.52
HP-I64VMS-CSWS-V0201--1.PCSI_SFX_I64EXE

 

This document contains information about installing and configuring the HP Secure Web Server for OpenVMS. It also includes information about running the web server, security information, and how to build and debug loadable Apache modules.

 

 

Software Version
Secure Web Server for OpenVMS Version 2.1

 

 

 

Hewlett-Packard Company
Palo Alto, Calif.

 

 

Contents

 

Chapter 1 Installation Requirements and Prerequisites

 

1.1 Hardware Requirements

     1.1.1 ODS-5 Disk

     1.1.2 Disk Space

     1.1.3 Stream_LF File Format No Longer Required

1.2 Software Requirements

     1.2.1 MultiNet and TCPware Network Products

     1.2.2 CSWS_JAVA Requirements

     1.2.3 CSWS_PHP Requirements
1.2.4 CSWS_PERL Requirements

     1.2.5 Building the Apache HTTP Server from Source Code

 

Chapter 2 Installation and Configuration

 

2.1 Read the Release Notes

2.2 Install the Secure Web Server

     2.2.1 Sample Installation

2.3 Configure the Secure Web Server

     2.3.1 Configuration Menu

     2.3.3 Configuring a Single Server

     2.3.3 Sample Configuration of a Single Server

     2.3.4 Configuring Multiple Servers

     2.3.5 Sample Configuration of Multiple Servers

     2.3.6 Delete Server Instance

     2.3.7 Managing suEXEC

     2.3.8 Running the OpenSSL Certificate Tool

     2.3.9 Converting Files to Stream_LF

     2.3.10 Starting and Stopping the Secure Web Server

     2.3.11 Showing the Status of an Apache Instance
     2.3.12 Adding a Node to CSWS in a Cluster Environment

     2.3.13 Managing Multiple Servers

          2.3.13.1 HTTPD.CONF

          2.3.13.2 APACHE$SETUP.COM and LOGIN.COM

      2.3.14 Viewing the OpenSSL Certificate

2.4 Post Configuration Checklist

     2.4.1 Configure CSWS_JAVA

     2.4.2 Check the CSWS_PERL Configuration

     2.4.3 Check the CSWS_PHP Configuration

     2.4.4 Run AUTOGEN

     2.4.5 Check Disk Quota

     2.4.6 Check for SET TERMINAL/INQUIRE

2.5 Test the Installation

     2.5.1 Browser Test

     2.5.2 TELNET Test

     2.5.3 Troubleshooting

2.6 What's Next

2.7 Merge Changes to Files You Have Customized

2.8 Installing Optional Modules at a Later Time

 

Chapter 3 Running the Secure Web Server on OpenVMS

 

3.1 Starting and Stopping the Server

     3.1.1 Starting the Server

     3.1.2 Stopping the Server

          3.1.2.1 Stopping the Server Using the Server Process Name

3.2 Server Log File

3.3 Performance Considerations

     3.3.1 Limits and Quotas

     3.3.2 Server Experiencing Medium to High Usage

     3.3.3 Global Pages and Global Sections

     3.3.4 Excessive File Build Up

3.4 Customizing the Server Environment

3.5 Modules and Directives

     3.5.1 Apache Modules

     3.5.2 Apache 1.3 Modules Not Included

     3.5.3 OpenVMS Directives

     3.5.4 Command Line Options

     3.5.5 Virtual Host Support

     3.5.6 Dynamic Shared Object Support

     3.5.7 File Handlers

     3.5.8 Content Negotiation

     3.5.9 Apache API

     3.5.10 WebDAV (Distributed Authoring and Versioning) Support

          3.5.10.1 Testing DAV Operation

     3.5.11 suEXEC Support
3.5.12 MOD_SSL
3.5.12.1 Setting up a Galaxy Shared-Memory SSL Session Cache

     3.5.13 Running MOD_OSUSCRIPT

3.6 File Formats

3.7 Managing File and Directory Access Controls

     3.7.1 Outbound Access to Non-CSWS Files and Directories

     3.7.2 Inbound Access to SWS Files and Directories

3.8 Logical Names

3.9 OpenVMS Cluster Considerations

     3.9.1 Individual System vs. Clusterwide Definition

     3.9.2 Mixed-Architecture (Alpha and VAX) Cluster

3.10 Common Gateway Interface (CGI)

     3.10.1 CGI Environment Variables

     3.10.2 Referencing Input

     3.10.3 Executing CGI

     3.10.4 Logicals for Debugging CGI Scripts

     3.10.5 Displaying Graphics with CGI Command Procedures

 

Chapter 4 Security Information

 

4.1 Process Model

4.2 Privileges Required to Start and Stop the Server

4.3 File Ownership and Protection

4.4 Authentication Using OpenVMS Usernames and Passwords (MOD_AUTH_OPENVMS)

     4.4.1 The require group Directive

     4.4.2 The require user Directive

     4.4.3 Hiding Accounts

     4.4.4 MOD_AUTH_OPENVMS Security Considerations

     4.4.5 MOD_AUTH_OPENVMS Examples

4.5 Server Extensions (CGI Scripts, PHP Scripts, Perl Modules)

4.6 suEXEC in the Secure Web Server

     4.6.1 suEXEC Security Model

     4.6.2 Configuring suEXEC

4.7 Protecting Server Certificate Keys

 

Chapter 5 Building and Debugging Loadable Apache Modules for the Secure Web Server

 

5.1 The Apache API, Run-Time Library, and HTTP Request Processing

5.2 Building a Module

     5.2.1 Defining Your Apache Module Data Structure Symbol

     5.2.2 Compiling a Module

     5.2.3 Linking a Module

     5.2.4 Example: mod_rewrite

&