25.1 Setting Up SSL and Certificates on a Linux Middle Tier Server

This section includes the following information:

25.1.1 Configuring Apache 2 Web Server for SSL on an OES Linux Middle Tier Server

OES Linux configures Apache 2 by default with the SLES 9 Certificate Authority (CA) server certificates and enables Apache 2 for SSL use. If you require third-party certificates, you must configure Apache 2 for SSL according to directions given in Apache HTTP Server Version 2.0 Documentation. documentation.

25.1.2 Configuring Apache 2 Web Server for SSL on a SLES 9 SP1 Middle Tier Server

By default, the SLES 9 SP1 installation program does not install Apache web services. The following steps are based on the default SLES 9 SP1 installation options. If you change these default options, your results might be different.

NOTE:Certificates that require passphrases are not supported by the ZENworks Middle Tier Server.

Use the following steps to set up Web services on a SLES 9 SP1 server after the initial server installation:

  1. In YaST, select Network Services > HTTP Server.

    The HTTP server installation requires the source CD or installation location.

  2. Configure the HTTP server for SSL.

    1. In YaST, select Network Services > HTTP Server to configure the HTTP server for SSL.

    2. Select Enable for the HTTP Services.

    3. In the Settings list, select Default Host, then click Edit.

    4. In the Options list, select SSL, then click Edit.

    5. On the SSL Configuration screen, click Edit, select SSL Allowed, click OK, click Certificates, then select Use common server certificate.

      Two new items (SSLCertificateFile and SSLCertificateKeyFile) are added in the SSL Enabled list. These options configure the location for the SSL certificate and key files.

    6. Click OK, click OK again, then click Finish to save the configuration changes and exit YaST.

  3. In a text editor, open the /etc/sysconfig/apache2 file, then set the APACHE_SERVER_FLAGS variable to "SSL". For example:

    APACHE_SERVER_FLAGS=”SSL”

  4. Save the file.

  5. Use the rcapache2 restart command to restart the Apache2 Web server.

SSL is now configured on the Apache Web server. If the server has loading problems, use apache2ctl configtest to help you identify errors.