Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

"Don't think; let the machine do it for you!" -- E. C. Berkeley


devel / comp.unix.bsd.freebsd.misc / Re: Switching Apache Web Server Config?

SubjectAuthor
* Switching Apache Web Server Config?Louis Epstein
`* Re: Switching Apache Web Server Config?Grant Taylor
 +- Re: Switching Apache Web Server Config?Vlad Markov
 `* Re: Switching Apache Web Server Config?Mike Scott
  `* Re: Switching Apache Web Server Config?John D Groenveld
   `* Re: Switching Apache Web Server Config?Mike Scott
    `- Re: Switching Apache Web Server Config?Louis Epstein

1
Switching Apache Web Server Config?

<ulg6f9$kft$1@reader2.panix.com>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=483&group=comp.unix.bsd.freebsd.misc#483

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!panix!.POSTED.main.lekno.ws!not-for-mail
From: le...@main.lekno.ws (Louis Epstein)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Switching Apache Web Server Config?
Date: Fri, 15 Dec 2023 00:26:17 -0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Message-ID: <ulg6f9$kft$1@reader2.panix.com>
Injection-Date: Fri, 15 Dec 2023 00:26:17 -0000 (UTC)
Injection-Info: reader2.panix.com; posting-host="main.lekno.ws:12.144.5.2";
logging-data="20989"; mail-complaints-to="abuse@panix.com"
User-Agent: tin/2.6.2-20221225 ("Pittyvaich") (FreeBSD/13.2-RELEASE-p4 (amd64))
 by: Louis Epstein - Fri, 15 Dec 2023 00:26 UTC

What is involved in taking my apache web server from http to https?
Is it a matter of adding or of replacing programs or of editing
config files?

-=-=-
The World Trade Center towers MUST rise again,
at least as tall as before...or terror has triumphed.

Re: Switching Apache Web Server Config?

<ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=484&group=comp.unix.bsd.freebsd.misc#484

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!news.1d4.us!news.quux.org!tncsrv06.tnetconsulting.net!tncsrv09.home.tnetconsulting.net!.POSTED.198.18.1.140!not-for-mail
From: gtay...@tnetconsulting.net (Grant Taylor)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
Date: Thu, 14 Dec 2023 19:35:04 -0600
Organization: TNet Consulting
Message-ID: <ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>
References: <ulg6f9$kft$1@reader2.panix.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 15 Dec 2023 01:35:04 -0000 (UTC)
Injection-Info: tncsrv09.home.tnetconsulting.net; posting-host="198.18.1.140";
logging-data="9940"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla Thunderbird
Content-Language: en-US
In-Reply-To: <ulg6f9$kft$1@reader2.panix.com>
 by: Grant Taylor - Fri, 15 Dec 2023 01:35 UTC

On 12/14/23 18:26, Louis Epstein wrote:
> What is involved in taking my apache web server from http to https?
> Is it a matter of adding or of replacing programs or of editing
> config files?

It should simple be a matter of configuration file changes.

I don't know how simple those changes are on your system. (I don't do
much with FreeBSD.)

--
Grant. . . .

Re: Switching Apache Web Server Config?

<20231214204500.50697076@happy.dwarf7.net>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=485&group=comp.unix.bsd.freebsd.misc#485

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: dvo...@aim.com (Vlad Markov)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
Date: Thu, 14 Dec 2023 20:45:00 -0500
Organization: A noiseless patient Spider
Lines: 19
Message-ID: <20231214204500.50697076@happy.dwarf7.net>
References: <ulg6f9$kft$1@reader2.panix.com>
<ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Injection-Info: dont-email.me; posting-host="f8e98f385fc39cc4d4773b88904a93b5";
logging-data="1536569"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+/VqJzD6he6hjCQLBrKCpJ"
Cancel-Lock: sha1:84w7h/5hXWUb/vezVw79bxOseag=
X-Newsreader: Claws Mail 3.19.1 (GTK+ 2.24.33; amd64-portbld-freebsd13.2)
 by: Vlad Markov - Fri, 15 Dec 2023 01:45 UTC

On Thu, 14 Dec 2023 19:35:04 -0600
Grant Taylor <gtaylor@tnetconsulting.net> wrote:

> On 12/14/23 18:26, Louis Epstein wrote:
> > What is involved in taking my apache web server from http to https?
> > Is it a matter of adding or of replacing programs or of editing
> > config files?
>
> It should simple be a matter of configuration file changes.
>
> I don't know how simple those changes are on your system. (I don't do
> much with FreeBSD.)
>
You will need SSL certificates. You might try getting them form here: https://letsencrypt.org/

The rest is configuration. It was well enough documented. I stopped hosting a web server a while ago but I remember documentation being under /usr/local/share/apache or /usr/local/share/doc/apache.

It is easy.

Re: Switching Apache Web Server Config?

<ulh1ri$1quj8$1@dont-email.me>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=486&group=comp.unix.bsd.freebsd.misc#486

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!news.samoylyk.net!news.gegeweb.eu!gegeweb.org!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: usenet...@scottsonline.org.uk.invalid (Mike Scott)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
Date: Fri, 15 Dec 2023 08:13:38 +0000
Organization: Scott family
Lines: 25
Message-ID: <ulh1ri$1quj8$1@dont-email.me>
References: <ulg6f9$kft$1@reader2.panix.com>
<ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 15 Dec 2023 08:13:38 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="57a99979c39bece97029fb3fedde16f8";
logging-data="1931880"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/GUa7/1280z/50HYbAp7rKPAgExT2wNTM="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:cH7uY0T/lv2l8i7B7Ju3Ki5VdpM=
In-Reply-To: <ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>
Content-Language: en-GB
 by: Mike Scott - Fri, 15 Dec 2023 08:13 UTC

On 15/12/2023 01:35, Grant Taylor wrote:
> On 12/14/23 18:26, Louis Epstein wrote:
>> What is involved in taking my apache web server from http to https?
>> Is it a matter of adding or of replacing programs or of editing
>> config files?
>
> It should simple be a matter of configuration file changes.
>
> I don't know how simple those changes are on your system.  (I don't do
> much with FreeBSD.)
>
>
>
Not quite so simple, as you need some security certificates. You can pay
for these if you want, or check out (for example) letsencrypt for free
self-signed cert's.

I did get mine running, but it was a bit like finding my way round a
strange town in a good old-fashioned pea-souper.

--
Mike Scott
Harlow, England

Re: Switching Apache Web Server Config?

<9u_eN.24594$24ld.10920@fx07.iad>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=487&group=comp.unix.bsd.freebsd.misc#487

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!eternal-september.org!feeder3.eternal-september.org!eternal-september.org!news.mixmin.net!newsreader4.netcologne.de!news.netcologne.de!peer02.ams1!peer.ams1.xlned.com!news.xlned.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!fx07.iad.POSTED!not-for-mail
From: groenv...@acm.org (John D Groenveld)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
References: <ulg6f9$kft$1@reader2.panix.com> <ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net> <ulh1ri$1quj8$1@dont-email.me>
Organization: Groenveld.US
Lines: 17
Message-ID: <9u_eN.24594$24ld.10920@fx07.iad>
X-Complaints-To: abuse@frugalusenet.com
NNTP-Posting-Date: Fri, 15 Dec 2023 15:43:01 UTC
Date: Fri, 15 Dec 2023 15:43:01 GMT
X-Received-Bytes: 1592
 by: John D Groenveld - Fri, 15 Dec 2023 15:43 UTC

In article <ulh1ri$1quj8$1@dont-email.me>,
Mike Scott <usenet.16@scottsonline.org.uk.invalid> wrote:
>Not quite so simple, as you need some security certificates. You can pay
>for these if you want, or check out (for example) letsencrypt for free
>self-signed cert's.

There appears to be a plethora of FreeBSD ports of ACME clients
including Certbot:
<URL:https://www.f:reshports.org/search.php?stype=package&method=match&query=acme&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>
<URL:https://www.freshports.org/search.php?stype=package&method=match&query=certbot&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>

And plenty of success stories:
<URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=acme+site%3AFreeBSD.org&submit=Search&ia=web>
<URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=certbot+site%3AFreeBSD.org&submit=Search&ia=web>

John
groenveld@acm.org

Re: Switching Apache Web Server Config?

<uli9be$21cee$1@dont-email.me>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=488&group=comp.unix.bsd.freebsd.misc#488

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!news.swapon.de!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: usenet...@scottsonline.org.uk.invalid (Mike Scott)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
Date: Fri, 15 Dec 2023 19:27:42 +0000
Organization: Scott family
Lines: 32
Message-ID: <uli9be$21cee$1@dont-email.me>
References: <ulg6f9$kft$1@reader2.panix.com>
<ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net>
<ulh1ri$1quj8$1@dont-email.me> <9u_eN.24594$24ld.10920@fx07.iad>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Fri, 15 Dec 2023 19:27:42 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="57a99979c39bece97029fb3fedde16f8";
logging-data="2142670"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/geZ+diKc2ranyGV5eX83pe6gTOONVvtg="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:4EykBhsEKorZTBmt9iHQ0ZEbt48=
In-Reply-To: <9u_eN.24594$24ld.10920@fx07.iad>
Content-Language: en-GB
 by: Mike Scott - Fri, 15 Dec 2023 19:27 UTC

On 15/12/2023 15:43, John D Groenveld wrote:
> In article <ulh1ri$1quj8$1@dont-email.me>,
> Mike Scott <usenet.16@scottsonline.org.uk.invalid> wrote:
>> Not quite so simple, as you need some security certificates. You can pay
>> for these if you want, or check out (for example) letsencrypt for free
>> self-signed cert's.
>
> There appears to be a plethora of FreeBSD ports of ACME clients
> including Certbot:
> <URL:https://www.f:reshports.org/search.php?stype=package&method=match&query=acme&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>
> <URL:https://www.freshports.org/search.php?stype=package&method=match&query=certbot&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>
>
> And plenty of success stories:
> <URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=acme+site%3AFreeBSD.org&submit=Search&ia=web>
> <URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=certbot+site%3AFreeBSD.org&submit=Search&ia=web>
>
> John
> groenveld@acm.org

Yes, thanks for pointing that out. I'm using certbot, and it seems to
run happily without attention once set up.

I had to sort this a couple of years ago - running a web site at home
for a small choir, I found some members' phones were so security minded,
https was mandatory. Chrome on my android tablet is equally annoying, as
it won't access what it thinks are unreasonable web ports; which I use
for marginal extra security. Some kit is too smart to be useful.

--
Mike Scott
Harlow, England

Re: Switching Apache Web Server Config?

<ulltba$os6$1@reader2.panix.com>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=489&group=comp.unix.bsd.freebsd.misc#489

 copy link   Newsgroups: comp.unix.bsd.freebsd.misc
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!panix!.POSTED.main.lekno.ws!not-for-mail
From: le...@main.lekno.ws (Louis Epstein)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Switching Apache Web Server Config?
Date: Sun, 17 Dec 2023 04:27:22 -0000 (UTC)
Organization: PANIX Public Access Internet and UNIX, NYC
Message-ID: <ulltba$os6$1@reader2.panix.com>
References: <ulg6f9$kft$1@reader2.panix.com> <ulgag8$9mk$1@tncsrv09.home.tnetconsulting.net> <ulh1ri$1quj8$1@dont-email.me> <9u_eN.24594$24ld.10920@fx07.iad> <uli9be$21cee$1@dont-email.me>
Injection-Date: Sun, 17 Dec 2023 04:27:22 -0000 (UTC)
Injection-Info: reader2.panix.com; posting-host="main.lekno.ws:12.144.5.2";
logging-data="25478"; mail-complaints-to="abuse@panix.com"
User-Agent: tin/2.6.2-20221225 ("Pittyvaich") (FreeBSD/13.2-RELEASE-p4 (amd64))
 by: Louis Epstein - Sun, 17 Dec 2023 04:27 UTC

Mike Scott <usenet.16@scottsonline.org.uk.invalid> wrote:
> On 15/12/2023 15:43, John D Groenveld wrote:
>> In article <ulh1ri$1quj8$1@dont-email.me>,
>> Mike Scott <usenet.16@scottsonline.org.uk.invalid> wrote:
>>> Not quite so simple, as you need some security certificates. You can pay
>>> for these if you want, or check out (for example) letsencrypt for free
>>> self-signed cert's.
>>
>> There appears to be a plethora of FreeBSD ports of ACME clients
>> including Certbot:
>> <URL:https://www.f:reshports.org/search.php?stype=package&method=match&query=acme&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>
>> <URL:https://www.freshports.org/search.php?stype=package&method=match&query=certbot&num=500&category=&orderby=category&orderbyupdown=asc&search=Search&format=html&branch=head>
>>
>> And plenty of success stories:
>> <URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=acme+site%3AFreeBSD.org&submit=Search&ia=web>
>> <URL:https://duckduckgo.com/?ka=v&kt=v&kh=1&kj=r2&q=certbot+site%3AFreeBSD.org&submit=Search&ia=web>
>>
>> John
>> groenveld@acm.org
>
> Yes, thanks for pointing that out. I'm using certbot, and it seems to
> run happily without attention once set up.

I also received some private email pointing me toward certbot.
Have not tried anything yet.
> I had to sort this a couple of years ago - running a web site at home
> for a small choir, I found some members' phones were so security minded,
> https was mandatory. Chrome on my android tablet is equally annoying, as
> it won't access what it thinks are unreasonable web ports; which I use
> for marginal extra security. Some kit is too smart to be useful.
>

-=-=-
The World Trade Center towers MUST rise again,
at least as tall as before...or terror has triumphed.

1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor