Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
tutorial:adm:server_preparation [2021/05/10 14:56] urbanl [Disabling mod_security rules] Removing modsec rules which are not in modsec_crs 3.0 |
tutorial:adm:server_preparation [2021/05/10 16:14] urbanl [Tomcat] Changed tomcat version to 9.0 |
||
---|---|---|---|
Line 215: | Line 215: | ||
</ | </ | ||
- | * Download Apache Tomcat | + | * Download Apache Tomcat |
- | * In our exapmle the version is 8.5.57. | + | * In our exapmle the version is 9.0.45. |
* extract files from the archive: | * extract files from the archive: | ||
<code bash> | <code bash> | ||
- | tar xzf apache-tomcat-8.5.57.tar.gz | + | tar xzf apache-tomcat-9.0.45.tar.gz |
</ | </ | ||
Line 542: | Line 542: | ||
RewriteRule " | RewriteRule " | ||
</ | </ | ||
+ | |||
+ | === Certificate for httpd === | ||
+ | |||
+ | If you have prepared certifikate, | ||
+ | < | ||
+ | SSLCertificateFile PATH_TO_CERTIFICATE_FILE | ||
+ | SSLCertificateKeyFile PATH_TO_CERTIFICATE_KEY_FILE | ||
+ | SSLCertificateChainFile PATH_TO_CA_CHAIN_FILE | ||
+ | </ | ||
+ | Then continue with cheking syntax of httpd. | ||
+ | |||
+ | If you not prepared them in the moment. Create temporary certificate and key. | ||
+ | < | ||
+ | mkdir / | ||
+ | cd / | ||
+ | openssl genrsa -out http_temp_cert.key | ||
+ | openssl req -new -key http_temp_cert.key -out http_temp_cert.csr -subj "/ | ||
+ | openssl x509 -req -in http_temp_cert.csr -signkey http_temp_cert.key -days 1 -sha256 -out http_temp_cert.crt | ||
+ | rm http_temp_cert.csr | ||
+ | chmod 600 / | ||
+ | chown -R tomcat: | ||
+ | </ | ||
+ | Then change set path to them in these properties in ''/ | ||
+ | < | ||
+ | SSLCertificateFile / | ||
+ | SSLCertificateKeyFile / | ||
+ | </ | ||
+ | |||
+ | === Checking httpd configuration syntax and configuring selinux === | ||
Syntax check before httpd restart | Syntax check before httpd restart |