Apache

SSL Certificate Installation on Nginx or Apache

Log — Tags: Apache, Nginx, SSL — Posted by Starck on January 11, 2014

SSL Certificate

Before we can sign up for a certificate we have to generate a RSA private key

openssl genrsa -des3 -out example.com_secure.key 2048

1	openssl genrsa -des3 -out example.com_secure.key 2048

You will be prompted to provide a passphrase(required). The key file is secured with this passphrase but we will eventually remove this protection.

Then, we will use this private key to generate a certificate signing request which is then submitted to the CA.

openssl req -new -key example.com_secure.key -out example.com.csr

1	openssl req -new -key example.com_secure.key -out example.com.csr

Remove the encryption from the RSA private key

Before we start configuring HTTPS Server we have to make sure to remove the passphrase from our RSA key. Otherwise you have to provide the password every time server started.

openssl rsa -in example.com_secure.key -out example.com_secure.key

1	openssl rsa -in example.com_secure.key -out example.com_secure.key

The unencrypted private key should only be readable by the owner of the Nginx or Apache master process. Most of the time this is the root user:

chmod 400 example.com_secure.key
sudo chown root:root example.com_secure.key

1 2	chmod 400 example.com_secure.key sudo chown root:root example.com_secure.key

Generate SSL Certificate

openssl x509 -req -days 365 -in example.com_secure.csr -signkey example.com_secure.key -out example.com_secure.crt

1	openssl x509 -req -days 365 -in example.com_secure.csr -signkey example.com_secure.key -out example.com_secure.crt

Setting up server

Nginx

server {

    listen 443;
    server_name example.com;
    root /var/www/example.com

    ssl on;
    ssl_certificate /path/example.com_secure.crt;
    ssl_certificate_key /path/example.com_secure.key;

}

server {

listen 443;

server_name example.com;

root /var/www/example.com

ssl on;

ssl_certificate /path/example.com_secure.crt;

ssl_certificate_key /path/example.com_secure.key;

}

<VirtualHost *:443>
    DocumentRoot /var/www/example.com
    SSLEngine on
    SSLCertificateFile /path/example.com_secure.crt
    SSLCertificateKeyFile /path/example.com_secure.key
    SSLCertificateChainFile /path/example.com_secure.crt
</VirtualHost>

DocumentRoot /var/www/example.com

SSLEngine on

SSLCertificateFile /path/example.com_secure.crt

SSLCertificateKeyFile /path/example.com_secure.key

SSLCertificateChainFile /path/example.com_secure.crt

</VirtualHost>

Comments (0)

Nginx with Apache + FastCGI + PHP-FPM

Coding — Tags: Apache, Nginx, php5-fpm, Ubuntu — Posted by Starck on January 10, 2014

Install Apache2 + FastCGI + PHP-FPM

Apache Settings

/etc/apache2/sites-availabe/test.server.com.conf:

<VirtualHost 127.0.0.1:8080>
        ServerName test.server.com
        ServerAdmin webmaster@server.com
        DocumentRoot /var/www/test.server.com
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>

ServerName test.server.com

ServerAdmin webmaster@server.com

DocumentRoot /var/www/test.server.com

ErrorLog ${APACHE_LOG_DIR}/error.log

CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

/etc/apache2/ports.conf:

Listen 127.0.0.1:8080

1	Listen 127.0.0.1:8080

Install Nginx

sudo apt-get install nginx

/etc/nginx/sites-available/test:

server {
        listen   80;

        root /var/www/test.server.com;
        index index.html index.php index.htm;

        server_name test.server.com;

        location / {
            # Custom 404 page
            # try_files $uri $uri/ /not_found_error.html;
        }

        location ~ \.php$ {

            proxy_set_header X-Real-IP  $remote_addr;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header Host $host;
            proxy_pass http://127.0.0.1:8080;

         }

         location ~ /\.ht {
                deny all;
        }
}

server {

listen 80;

root /var/www/test.server.com;

index index.html index.php index.htm;

server_name test.server.com;

location / {

# Custom 404 page

# try_files $uri $uri/ /not_found_error.html;

}

location ~ \.php$ {

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $remote_addr;

proxy_set_header Host $host;

proxy_pass http://127.0.0.1:8080;

}

location ~ /\.ht {

deny all;

}

sudo ln -s /etc/nginx/sites-available/test /etc/nginx/sites-enabled/test

sudo rm /etc/nginx/sites-enabled/default

Restart Server

sudo service nginx restart

sudo service apache2 restart

sudo service php5-fpm restart

Comments (0)

Install Mod-FastCGI and PHP5-FPM on Ubuntu

Log — Tags: Apache, mod-fastcgi, PHP, php5-fpm, Ubuntu — Posted by Starck on August 22, 2013

Installation

$ sudo apt-get install apache2-mpm-worker libapache2-mod-fastcgi php5-fpm
$ sudo a2enmod actions alias fastcgi

1 2	$ sudo apt-get install apache2-mpm-worker libapache2-mod-fastcgi php5-fpm $ sudo a2enmod actions alias fastcgi

Configuration

edit /etc/apache2/mods-enabled/fastcgi.conf:

AddHandler php5-fcgi .php
Action php5-fcgi /php5-fcgi
Alias /php5-fcgi /usr/lib/cgi-bin/php5-fcgi
FastCgiExternalServer /usr/lib/cgi-bin/php5-fcgi -socket /var/run/php5-fpm.sock -pass-header Authorization

AddHandler php5-fcgi .php

Action php5-fcgi /php5-fcgi

Alias /php5-fcgi /usr/lib/cgi-bin/php5-fcgi

FastCgiExternalServer /usr/lib/cgi-bin/php5-fcgi -socket /var/run/php5-fpm.sock -pass-header Authorization

Restart Apache2 and PHP5-FPM

$ sudo service apache2 restart && sudo service php5-fpm restart

1	$ sudo service apache2 restart && sudo service php5-fpm restart

— Updated 2014-01-09 (Ubuntu 13.10)–

mkdir /var/www/cgi-bin

touch /var/www/cgi-bin/php5.fcgi

chown -R www-data:www-data /var/www/cgi-bin

edit /etc/apache2/mods-enabled/fastcgi.conf:

<IfModule mod_fastcgi.c>
  AddHandler fastcgi-script .fcgi
  #FastCgiWrapper /usr/lib/apache2/suexec
  FastCgiIpcDir /var/lib/apache2/fastcgi

  Alias /php5.fcgi /var/www/cgi-bin/php5.fcgi
  AddType application/x-httpd-fastphp5 .php
  Action application/x-httpd-fastphp5 /php5.fcgi

  FastCGIExternalServer /var/www/cgi-bin/php5.fcgi -socket /var/run/php5-fpm.sock

  <Directory "/var/www/cgi-bin">
  Order allow,deny
    <Files "php5.fcgi">
      Order deny,allow
    </Files>
  </Directory>

</IfModule>

AddHandler fastcgi-script .fcgi

#FastCgiWrapper /usr/lib/apache2/suexec

FastCgiIpcDir /var/lib/apache2/fastcgi

Alias /php5.fcgi /var/www/cgi-bin/php5.fcgi

AddType application/x-httpd-fastphp5 .php

Action application/x-httpd-fastphp5 /php5.fcgi

FastCGIExternalServer /var/www/cgi-bin/php5.fcgi -socket /var/run/php5-fpm.sock

Order allow,deny

Order deny,allow

</Files>

</Directory>

</IfModule>

Virtual host setting example :

<VirtualHost *:80>
  # Admin email, Server Name (domain name), and any aliases
  ServerAdmin webmaster@email.com
  ServerName  www.example.com
  # ServerAlias example.com

  # Index file and Document Root (where the public files are located)
  DirectoryIndex index.php index.html index.htm
  DocumentRoot /var/www/example
  <Directory /var/www/example>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride all
        Order allow,deny
        Allow from all
        Require all granted
  </Directory>

  # Log file locations
  LogLevel warn
  ErrorLog  ${APACHE_LOG_DIR}/error.example.com.log
  CustomLog ${APACHE_LOG_DIR}/access.example.com.log combined

</VirtualHost>

# Admin email, Server Name (domain name), and any aliases

ServerAdmin webmaster@email.com

ServerName www.example.com

# ServerAlias example.com

# Index file and Document Root (where the public files are located)

DirectoryIndex index.php index.html index.htm

DocumentRoot /var/www/example

Options Indexes FollowSymLinks MultiViews

AllowOverride all

Order allow,deny

Allow from all

Require all granted

</Directory>

# Log file locations

LogLevel warn

ErrorLog ${APACHE_LOG_DIR}/error.example.com.log

CustomLog ${APACHE_LOG_DIR}/access.example.com.log combined

</VirtualHost>

References

Continue Reading

Nginx with Apache + FastCGI + PHP-FPM

Comments (3)

Upgrading PHP on MacOS

Log — Tags: Apache, Brew, Mac, PHP — Posted by Starck on March 29, 2013

所需工具

使用 Brew 讓在 MacOS 安裝管理套件變得容易許多, 而 HomeBrew-PHP 則是讓你在 MacOS 上安裝 PHP 和管理 extensions 的 Brew 套件.

Brew

安裝 Brew:

ruby -e "$(curl -fsSL https://raw.github.com/mxcl/homebrew/go)"

如果之前已經安裝過 Brew, 依據習慣, 我會將 Brew 更新到最後的版本:

brew update

brew upgrade

Installation

Tap the homebrew/dupes repository into your brew installation:

brew tap homebrew/dupes

Tap the repository into your brew installation:

brew tap josegonzalez/homebrew-php

安裝參數說明

brew options php54

安裝 php 5.4

brew install php54

安裝時可能會出現的問題

jpeg8-d:

jpeg8-d is already installed, it's just not linked
    Could not symlink file: /usr/local/Cellar/jpeg/8d/bin/wrjpgcom
    Target /usr/local/bin/wrjpgcom already exists. You may need to delete it.
    To force the link and delete this file, do:
    brew link --overwrite formula_name

解法: brew link --overwrite jpeg

reference

Apache httpd.conf 設定

先檢查 /usr/local/Cellar/php54/ 下的 php 版本號是多少, 例如: 5.4.12

# /etc/apache2/httpd.conf
# Swapping from PHP53 to PHP54
# LoadModule php5_module    /usr/local/Cellar/php53/5.3.20/libexec/apache2/libphp5.so
LoadModule php5_module    /usr/local/Cellar/php54/5.4.12/libexec/apache2/libphp5.so

# /etc/apache2/httpd.conf

# Swapping from PHP53 to PHP54

# LoadModule php5_module /usr/local/Cellar/php53/5.3.20/libexec/apache2/libphp5.so

LoadModule php5_module /usr/local/Cellar/php54/5.4.12/libexec/apache2/libphp5.so

** Update 2013-08-07 **

在 Moutain Lion Server 下, 修改 php module 讀取路徑要到 /Library/Server/Web/Config/apache2/httpd_server_app.conf

** Update 2013-10-26 **

After updating Mavericks Server, please also upgrade to the latest Xcode and make sure you re-install Command-line Tools: xcode-select --install

Edit /Library/Server/Web/Config/apache2/httpd_server_app.conf:

# LoadModule php5_module libexec/apache2/libphp5.so
LoadModule php5_module /usr/local/opt/php54/libexec/apache2/libphp5.so

1 2	# LoadModule php5_module libexec/apache2/libphp5.so LoadModule php5_module /usr/local/opt/php54/libexec/apache2/libphp5.so

如果使用 FPM, 請在 Terminal 下達:

cp /usr/local/Cellar/php54/5.4.12/homebrew-php.josegonzalez.php54.plist ~/Library/LaunchAgents/
launchctl unload -w ~/Library/LaunchAgents/homebrew-php.josegonzalez.php53.plist
launchctl load -w ~/Library/LaunchAgents/homebrew-php.josegonzalez.php54.plist

cp /usr/local/Cellar/php54/5.4.12/homebrew-php.josegonzalez.php54.plist ~/Library/LaunchAgents/

launchctl unload -w ~/Library/LaunchAgents/homebrew-php.josegonzalez.php53.plist

launchctl load -w ~/Library/LaunchAgents/homebrew-php.josegonzalez.php54.plist

Command-line

If you would like to swap the PHP you use on the command line, you should update the $PATH variable in either your .bashrc or .bash_profile:

# Swapping from PHP53 to PHP54
# export PATH="$(brew --prefix josegonzalez/php/php53)/bin:$PATH"
export PATH="$(brew --prefix josegonzalez/php/php54)/bin:$PATH"

# Swapping from PHP53 to PHP54

# export PATH="$(brew --prefix josegonzalez/php/php53)/bin:$PATH"

export PATH="$(brew --prefix josegonzalez/php/php54)/bin:$PATH"

Comments (1)