====== Apache ====== ===== SSL ===== ==== Quick and Dirty ==== * Self-Signed: make-ssl-cert generate-default-snakeoil --force-overwrite * /etc/apache2/conf.d/ssl: SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key * VirtualHost: ... SSLEngine on ... ==== Slow and Sane ==== #Private key (very secret). Do not use Passphrase openssl genrsa -des3 -out server.key 4096 #Remove Passphrase cp server.key server.key.org openssl rsa -in server.key.org -out server.key #Signing request openssl req -new -key server.key -out server.csr #Generate certificate openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt ===== Virtual Host ===== NameVirtualHost *:80 ServerName sepp.example.com ServerAlias *.sepp.example.com DocumentRoot /home/sepp/vhosts/sepp.example.com ===== WebDAV ===== ... DavLockDB /home/sepp/vhosts/svn/DavLock ... AuthType Digest AuthName "Test" AuthDigestDomain /test2 AuthUserFile /home/sepp/digest Require valid-user Dav on * DavLockDB muss mit user:group www-data:www-data angelegt sein * Die digest-Datei anlegen mit: htdigest -c digest Test user ===== WebDAV mit SVN support und autoversioning ===== DAV svn SVNAutoversioning on SVNPath /home/sepp/vhosts/svn/test/ AuthType Basic AuthName "Test" AuthUserFile /home/sepp/basic Require valid-user * unter /home/sepp/vhosts/svn/ muss mittels svnadmin create test ein Repository angelegt werden, auf das der Benutzer www-data:www-data Schreibzugriff hat * Die basic-Datei anlegen mit: htpasswd -c auth user