[Top] [Prev] [Next] [Last]
|
|
Installation
This chapter provides information about how to set up your new Stronghold Web Server, including
- system requirements
- server installation procedures
- manual upgrade procedures
- license block installation procedures
To customize your new site after installation, you'll need to configure Stronghold Web Server:
- Section I of the Administration Guide provides instructions for using the text-based configuration file and each individual configuration directive. It also describes how to recompile the server with a different set of modules.
- If you're already experienced in configuring and administrating the Apache server, you already know how to configure Stronghold Web Server and most of its modules.
System Requirements
- at least 50 MB available hard disk space
- at least 8 MB available RAM
These are the minimum requirements for running Stronghold itself. In addition, you also need
- adequate disk space for HTML, CGI, and log files
- adequate RAM to support your anticipated server load.
- platform support for virtual hosts (recommended but not required)
Installing Stronghold Web Server
Stronghold Web Server comes in a single, self-contained installer file when you download it. Note that in Stronghold 2.4.1, no upgrade scripts are available. This version of Stronghold must be installed from scratch. If you have an existing Apache or Stronghold server, install this version into a new directory and then upgrading manually. See "Manually Upgrading to Stronghold 2.4.1" on page 11.
Figure 1: Elements of an Installation Flowchart
The program installs Stronghold Web Server from scratch, then starts the new server with the configuration file shown in "Default Configuration" at the end of this guide. The minimum configuration required to run the server includes
- some basic information about your site
The installer uses this information to create a new configuration file.
- an encryption key pair
The installer guides you through the process of generating the key pair
- an authentication certificate
Figure 2: Installing Stronghold Web Server from Scratch
# ./sh24-platform
# chmod 0700 sh24-platform
NOTE: If you have an existing server on the same host, you must stop the old server or install Stronghold on ports that your server does not use.
Figure 3: The Stronghold Installer
Select Yes by pressing Return.
To configure Stronghold
- Enter the absolute path to the directory where you want to install the server and its components. If the directory you enter does not exist, the program asks you to confirm that you want to create a new directory. In that case, select Yes to continue.
- Press any key.
- Enter the path to the directory where you want to store server logs.
- Enter the fully-qualified domain name of your main server host.
- Enter the email address of the server administrator.
The default is "webmaster" at the hostname you entered in the previous step.
- Enter the number of the port you want to use for regular, unsecured transactions.
- Enter the port you want to use for secure, encrypted transactions.
C2Net Software US C2Net International stronghold-admin@c2.net sales@eu.c2.net - Press Return.
- Paste your complete Stronghold license block into the window.
Your license block looks something like this:
*****BEGIN LICENSE BLOCK*****
TEIAAQCKAAAAAGar2a7Pc0iD2oyGDN9a5mrYkZ0NrG7Zcy7UFbFoP4xLzvcVAN4K
0Mrww4z0A2o+gfVADbDz9IdePDKOA21C2E8SiPu1qwVI1pwvbA6xuVRWDo05BT/I
rNGExtSx+LMh3N1q2icj4eD53kNQVoLvaoQ5CcYvWGexrKiSDQvE3agLU2VyaWFs
OiAzMTQxNTkyNjUzNTg5NzkzMjMKQ29tcGFueTogQzJOZXQgRXVybSchmunkZApF
eHBpcmVzOiBOZXZlcgpQcm9kdWN0OiBTSDIKVHlwZfogRXZhbHVhdGlvbgpJREVB
OiBZZXMKRmFrZTogCkJyb2tlbiBMaW5lCkJyb2tlbjogMQ==
*****END LICENSE BLOCK*****
- Press Control-D at the beginning of the first blank line after the license block. Press Return to get a blank line if one was not inserted when you pasted the license block.
To generate a new key
- Press Return.
- Enter a key size in bits.
NOTE: Keys sizes must be either 512 or 1024 for compatibility with certain browsers. We recommend 1024 bits. Keys larger than 1024 bits are incompatible with some versions of Netscape Navigator and Microsoft Internet Explorer, and with other browsers that use RSA's BSAFE cryptography toolkit.
- Tap out some random keystrokes.
0 * -Enough, thank you.
The program generates the key pair and saves it at ServerRoot/ssl/private/hostname.key. Then it asks whether you want to request a signed certificate from a Certification Authority (CA). You must have a signed certificate in order to authenticate your site. You can request one from Verisign, Thawte, or another CA.
To request a signed certificate from Verisign
- At the Certification Authority prompt, enter "A":
Please choose the CA you would like to use:
A) VeriSign
B) Thawte
C) Other
Choose: A
- Enter the two-letter code for your country.
- Enter the full name of your state or province.
- Enter the name of your city, town, or other locality.
- Enter the name of your organization.
- Enter the name of your unit within the organization.
- Enter the fully-qualified domain name of your site.
The program prints the certificate signing request (CSR), which looks something like this:
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBEzCBzgIBADB7MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEQ
MA4GA1UEBxMHT2FrbGFuZDEbMBkGA1UEChMSQzJOZXQgU29mdHdhcmUgSW5jMRAw
DgYDVQQLEwdUZXN0aW5nMRYwFAYDVQQDEw1nYWJiZXIuYzIubmV0MEwwDQYJKoZI
hvcNAQEBBQADOwAwOAIxAJukoQhq4LanG2k+/LnRTGJAcgv9LJPsdfCsjqRs8ygo
yaw4ucOEdx+WdnM0x36NcQIDAQABMA0GCSqGSIb3DQEBBAUAAzEABRLR6IkG70oN
G1MnvuMDeWou4kIvc98ysjssCNKsDKsHAXBSEbfsIQs5JRNagVBW
-----END NEWCERTIFICATE REQUEST-----
- Copy the CSR.
- Using your Web browser, access https://digitalid.verisign.com/ss_getCSR.html.
- Follow Verisign's online instructions.
To request a signed certificate from Thawte
- At the Certification Authority prompt, enter "B":
Please choose the CA you would like to use:
A) VeriSign
B) Thawte
C) Other
Choose: B
- Enter the two-letter code for your country.
- Enter the full name of your state or province.
- Enter the name of your city, town, or other locality.
- Enter the name of your organization.
- Enter the name of your unit within the organization.
- Enter the fully-qualified domain name of your site.
- Press Return.
- Copy the CSR.
- Using your Web browser, access https://www.thawte.com/cgi-bin/server/step1.sioux.
- Follow Thawte's online instructions.
To request a signed certificate from another CA
- Enter the email address of your Certification Authority.
- Enter the two-letter code for your country.
- Enter the full name of your state or province.
- Enter the name of your city, town, or other locality.
- Enter the name of your organization.
- Enter the name of your unit within the organization.
- Enter the fully-qualified domain name of your site.
- Press Return to send the certificate signing request to the email address you entered in step 1.
If you made a mistake in step 1, enter the correct email address here and then press Return.
- Press Return to see the text of the CSR.
If your CA uses Web forms for CA enrollment, you may need to paste this into those forms.
- Press Return to continue.
- Press Return to continue.,
To create a temporary certificate
- Enter the two-letter code for your country.
- Enter the full name of your state or province.
- Enter the name of your city, town, or other locality.
- Enter the name of your organization.
- Enter the name of your unit within the organization.
- Enter the fully-qualified domain name of your site.
- Press Return.
Manually Upgrading to Stronghold 2.4.1
Upgrades to this version can only be performed manually. The manual upgrade procedure is slightly different depending on whether you are upgrading from Stronghold 2.3 or earlier, Stronghold 2.4, or Apache.
- The source code has been reorganized; modules are now located in subdirectories of a new ServerRoot/src/modules/ directory.
- The Module directive has been changed to AddModule.
- The EXTRA_LFLAGS variable has been changed to EXTRA_LDFLAGS.
- The -DMAXIMUM_DNS definition is now obsolete.
- The -DSERVER_SUBVERSION=\"string\" compile-time option has been replaced with the run-time API call ap_add_version_component().
- The mod_dir module has been divided into mod_dir and mod_autoindex.
- The mod_auth_msql module is no longer included in the distribution.
Upgrading Stronghold 2.3 or Earlier
Upgrading to Stronghold Web Server 2.4.1 from Stronghold 2.3 or earlier involves
- copying all customized files from the old server directory tree to the new 2.4.1 directory tree
- modifying the server configuration file to reflect new configuration schemes introduced in Apache 1.3 and Stronghold 2.4.
- stopping the old server and starting the new one with your old site files and modified server configuration file in place
To upgrade from Stronghold 2.3 or earlier
- Install Stronghold 2.4.1 into a new directory, using the instructions in "Installing Stronghold Web Server" on page 2.
- Copy the contents of the old ServerRoot/cgi-bin/ directory into the 2.4.1 cgi-bin/ directory.
- Copy the contents of the old ServerRoot/htdocs/ directory into the 2.4.1 htdocs/ directory.
- Copy the contents of the old ServerRoot/conf/ directory into the 2.4.1 conf/ directory.
- Copy the contents of the old ServerRoot/ssl/ directory into the 2.4.1 ssl/ directory.
- If you use Stronghold's SWISH site indexer, copy any site indexes from the old ServerRoot/swish/ directory into the 2.4.1 swish/ directory.
- Create a new subdirectory in the 2.4.1 logs/ directory for storing your old log files:
# mkdir ServerRoot/logs/old
- Copy the contents of the old ServerRoot/logs/ directory into the new 2.4.1 ServerRoot/logs/old/ directory.
- Open both the old and new server configuration files using a text editor in separate windows.
- Copy and paste any custom configurations from the old file into the new file.
- Locate any AuthName directives and place quotes around their values. For example,
AuthName Marx Bros
AuthName "Marx Bros"
- Edit the ServerRoot directive to reflect the path to the new 2.4.1 directory.
- Change the StrongholdKey directive to StrongholdLicenseFile and replace the old license key value with the name of the file that contains the server license block.
- For every name-based virtual host configuration, enter a NameVirtualHost directive in the global configuration:
NameVirtualHost 209.60.53.41:80
NameVirtualHost 207.57.43.92:80
- For every <Files> container, replace the full path to the file with the filename.
<Files /usr/local/www/htdocs/aquabats/batty.html>
. . .
</Files>
<Directory /usr/local/www/htdocs/aquabats>
<Files batty.html>
. . .
</Files
</Directory>
- For every container that uses wildcards, modify the wildcard statement so that all slashes are literal.
Wildcards no longer match slash (/). For example,
<Directory /usr/local/www/htdocs/beavis*>
no longer matches any subdirectories of the beavis directory. Instead, it should be changed to
<Directory /usr/local/www/htdocs/beavis/*>
to match subdirectories one level below beavis, or
<Directory /usr/local/www/htdocs/beavis/*/*>
- Save the modified server configuration file.
- Stop the old server.
- Start the new server with the ServerRoot/bin/start-server script.
Upgrading From Stronghold 2.4
- Copy only httpd.conf to the new directory tree. Since httpd.conf uses absolute paths to the old ServerRoot directory, both server directories must be maintained.
- Copy all customized files from the old server directory tree to the new 2.4.1 directory tree, modify the configuration file to reflect the new path to ServerRoot, stop the old server and start the new one.
This section contains instructions for the second upgrade option.
To upgrade from Stronghold 2.4
- Install Stronghold 2.4.1 into a new directory, using the instructions in "Installing Stronghold Web Server" on page 2.
- Copy the contents of the old ServerRoot/cgi-bin/ directory into the 2.4.1 cgi-bin/ directory.
- Copy the contents of the old ServerRoot/htdocs/ directory into the 2.4.1 htdocs/ directory.
- Copy the contents of the old ServerRoot/conf/ directory into the 2.4.1 conf/ directory.
- Copy the contents of the old ServerRoot/ssl/ directory into the 2.4.1 ssl/ directory.
- If you use Stronghold's SWISH site indexer, copy any site indexes from the old ServerRoot/swish/ directory into the 2.4.1 swish/ directory.
- Create a new subdirectory in the 2.4.1 logs/ directory for storing the old log files:
# mkdir ServerRoot/logs/old
- Copy the contents of the old ServerRoot/logs/ directory into the new 2.4.1 ServerRoot/logs/old/ directory.
- Open httpd.conf in a text editor.
- Replace all references to the old ServerRoot path with the new path.
- Save the modified configuration file.
- Stop the old server.
- Start the new server with the ServerRoot/bin/start-server script.
Upgrading from Apache
Upgrading to Stronghold Web Server 2.4.1 from an Apache Web Server involves
- copying all customized files from the old server directory tree to the new 2.4.1 directory tree
- modifying the server configuration file to incorporate SSL support and other Stronghold-specific elements
- modifying the server configuration file to reflect new configuration schemes introduced in Apache 1.3.2 (if upgrading from a version of Apache prior to 1.3)
- stopping the old server and starting the new one with your old site files and modified server configuration file in place
To upgrade from an Apache Web Server
- Install Stronghold 2.4.1 into a new directory, using the instructions in "Installing Stronghold Web Server" on page 2.
- Copy the contents of the old ServerRoot/cgi-bin/ directory into the 2.4.1 cgi-bin/ directory.
- Copy the contents of the old ServerRoot/htdocs/ directory into the 2.4.1 htdocs/ directory.
- Copy the contents of the old ServerRoot/conf/ directory into the 2.4.1 conf/ directory.
- If you use the SWISH site indexer, copy any site indexes from the old swish/ directory into the 2.4.1 swish/ directory.
- Create a new subdirectory in the 2.4.1 logs/ directory for storing your old log files:
# mkdir ServerRoot/logs/old
- Copy the contents of the old ServerRoot/logs/ directory into the new 2.4.1 ServerRoot/logs/old/ directory.
- Open both the old and new server configuration files using a text editor in separate windows.
- Copy and paste any custom configurations from the old file into the new file.
- Locate any AuthName directives and place quotes around their values. For example,
AuthName Marx Bros
AuthName "Marx Bros"
- Edit the ServerRoot directive to reflect the path to the new 2.4.1 directory.
- In the global configuration, add the StrongholdLicenseFile directive. As its value, enter the name of the file that contains the server license block.
- Duplicate all <VirtualHost> containers in another part of the same file.
- In each original <VirtualHost> section, append the port number for non-SSL transactions to the hostname or IP number:
<VirtualHost 204.17.33.11:80>
- In each copied <VirtualHost> section, append the port number for SSL transactions to the hostname or IP number:
<VirtualHost 204.17.33.11:443>
- Add the following directives to the global server configuration:
Listen 443
- For every name-based virtual host configuration, enter a NameVirtualHost directive in the global configuration:
NameVirtualHost 209.60.53.41:80
NameVirtualHost 207.57.43.92:80
- Add these directives to each SSL <VirtualHost> section:
SSLFlag on
SSLCertificateKeyFile private/filename
SSLCertificateFile certs/filename
See the Administration Guide for information about generating keys and certificates.
- Add directives that pertain to modules that were installed with your Stronghold upgrade, if you wish to use them.
See the Administration Guide for information about directives.
- For every <Files> container, replace the full path to the file with the filename.
<Files /usr/local/www/htdocs/aquabats/batty.html>
. . .
</Files>
<Directory /usr/local/www/htdocs/aquabats>
<Files batty.html>
. . .
</Files
</Directory>
- For every container that uses wildcards, modify the wildcard statement so that all slashes are literal.
- Save the modified configuration file.
- Stop the old Apache server.
- Run the ServerRoot/bin/start-server script to start the new, SSL-enabled Stronghold server.
Requesting and Installing New License Blocks
When you first install Stronghold Web Server, the installation program prompts you for your license block and installs it automatically. If you installed an evaluation version of Stronghold before you purchased it, you installed a temporary license block that expires when your evaluation period ends. You must install your permanent license block when you receive it. You can do this manually or by using the install_lb utility located in the ServerRoot/bin/ directory.
NOTE: License keys from Stronghold version 2.3 and below do not work with Stronghold 2.4.1.
To install a license block with install_lb
- Copy the license block.
- Run the install_lb utility:
# ServerRoot/bin/install_lb
- Paste the license block into the install_lb window.
- Press Control-D at the beginning of the first blank line after the license block. Press Return to get a blank line if none was inserted when you pasted the license block.
To install a license block manually
- Back up the original sh2licence file:
# cp sh2licence sh2licence-backup
- Use a text editor to open the ServerRoot/sh2licence file.
- Delete your previous license block.
- Paste your new license block into the file.
Your license block looks something like this:
*****BEGIN LICENSE BLOCK*****
TEIAAQCKAAAAAGar2a7Pc0iD2oyGDN9a5mrYkZ0NrG7Zcy7UFbFoP4xLzvcVAN4K
0Mrww4z0A2o+gfVADbDz9IdePDKOA21C2E8SiPu1qwVI1pwvbA6xuVRWDo05BT/I
rNGExtSx+LMh3N1q2icj4eD53kNQVoLvaoQ5CcYvWGexrKiSDQvE3agLU2VyaWFs
OiAzMTQxNTkyNjUzNTg5NzkzMjMKQ29tcGFueTogQzJOZXQgRXVybSchmunkZApF
eHBpcmVzOiBOZXZlcgpQcm9kdWN0OiBTSDIKVHlwZfogRXZhbHVhdGlvbgpJREVB
OiBZZXMKRmFrZTogCkJyb2tlbiBMaW5lCkJyb2tlbjogMQ==
*****END LICENSE BLOCK*****
- Save the modified file.
- Restart the server:
# ServerRoot/bin/reload-server
[Top] [Prev] [Next] [Last]
© 1998 C2Net International
Feedback: stronghold-docs@c2.net![]()