Fedora42 : WEB Server(Apache2)

fedora42_en

2025.04.162025.04.23

Contents

1. Apache2 installation and virtual host configuration
2. Ensure CGI Script Usage
3. PHP installation and configuration
- 3.1.PHP Install
4. Digest authentication in Apache2
- 4.1 Create password file for Digest authentication
- 4.2 Edit Apache configuration file

1. Apache2 installation and virtual host configuration

1.1 Apache2 Install

①httpd Install

# dnf -y install httpd

Version Check
# httpd -v
Server version: Apache/2.4.63 (Fedora Linux)
Server built:   Jan 24 2025 00:00:00

# dnf -y install httpd

Version Check

# httpd -v

Server version: Apache/2.4.63 (Fedora Linux)

Server built: Jan 24 2025 00:00:00

1.2 Apache Configuration

①Edit httpd.conf file

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak
# vi /etc/httpd/conf/httpd.conf
#Line 91 : Specify administrator address
ServerAdmin [Email Address]
 
#Per line 101: Change ServerName
#ServerName www.example.com:80
ServerName [Domain name]
 
#Line 149 : Change (Indexes are deleted)
Options FollowSymLinks
 
#Line 156 : Change
AllowOverride All
 
#Line 169 : File names accessible by directory name only
Add "index.php index.cgi index.htm"
 
#Add to the last line
ServerTokens Prod

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak

# vi /etc/httpd/conf/httpd.conf

#Line 91 : Specify administrator address

ServerAdmin [Email Address]

#Per line 101: Change ServerName

#ServerName www.example.com:80

ServerName [Domain name]

#Line 149 : Change (Indexes are deleted)

Options FollowSymLinks

#Line 156 : Change

AllowOverride All

#Line 169 : File names accessible by directory name only

Add "index.php index.cgi index.htm"

#Add to the last line

ServerTokens Prod

②If Firewalld is enabled, HTTP service permission is required; use [80/TCP] for HTTP

# firewall-cmd --add-service=http --permanent
# firewall-cmd --reload

1 2	# firewall-cmd --add-service=http --permanent # firewall-cmd --reload

③Apache Auto-Start Configuration

# systemctl start httpd
# systemctl enable httpd
# systemctl status httpd
● httpd.service - The Apache HTTP Server
     Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             mq10-timeout-abort.conf, 50-keep-warm.conf
     Active: active (running) since Wed 2025-04-16 14:24:51 JST; 14s ago
 Invocation: c81f7020f3c845e19a844fae699c2397
       Docs: man:httpd.service(8)
   Main PID: 2178 (httpd)
     Status: "Total requests: 0; Idle/Busy workers 100/0;Requests/sec: 0; Bytes served/sec:   0 B/sec"
      Tasks: 177 (limit: 2246)
     Memory: 14.3M (peak: 14.8M)
        CPU: 81ms
     CGroup: /system.slice/httpd.service
             tq2178 /usr/sbin/httpd -DFOREGROUND
             tq2181 /usr/sbin/httpd -DFOREGROUND
             tq2182 /usr/sbin/httpd -DFOREGROUND
             tq2183 /usr/sbin/httpd -DFOREGROUND
             mq2187 /usr/sbin/httpd -DFOREGROUND

Apr 16 14:24:51 Lepard systemd[1]: Starting httpd.service - The Apache HTTP Server...
Apr 16 14:24:51 Lepard (httpd)[2178]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS
Apr 16 14:24:51 Lepard httpd[2178]: Server configured, listening on: port 80
Apr 16 14:24:51 Lepard systemd[1]: Started httpd.service - The Apache HTTP Server.

# systemctl start httpd

# systemctl enable httpd

# systemctl status httpd

● httpd.service - The Apache HTTP Server

Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: disabled)

Drop-In: /usr/lib/systemd/system/service.d

mq10-timeout-abort.conf, 50-keep-warm.conf

Active: active (running) since Wed 2025-04-16 14:24:51 JST; 14s ago

Invocation: c81f7020f3c845e19a844fae699c2397

Docs: man:httpd.service(8)

Main PID: 2178 (httpd)

Status: "Total requests: 0; Idle/Busy workers 100/0;Requests/sec: 0; Bytes served/sec: 0 B/sec"

Tasks: 177 (limit: 2246)

Memory: 14.3M (peak: 14.8M)

CPU: 81ms

CGroup: /system.slice/httpd.service

tq2178 /usr/sbin/httpd -DFOREGROUND

tq2181 /usr/sbin/httpd -DFOREGROUND

tq2182 /usr/sbin/httpd -DFOREGROUND

tq2183 /usr/sbin/httpd -DFOREGROUND

mq2187 /usr/sbin/httpd -DFOREGROUND

Apr 16 14:24:51 Lepard systemd[1]: Starting httpd.service - The Apache HTTP Server...

Apr 16 14:24:51 Lepard (httpd)[2178]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS

Apr 16 14:24:51 Lepard httpd[2178]: Server configured, listening on: port 80

Apr 16 14:24:51 Lepard systemd[1]: Started httpd.service - The Apache HTTP Server.

④operation check
If you access http://[server IP address] and the Fedora Webserver Test Page is displayed as shown below, it is OK.

⑤Hide the Welcome page, create a new index.html file as a Test Page, and check apache operation

Rename the welcome page

# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

1	# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

Create HTML test page
# vi /var/www/html/index.html
<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: center;">
Apache Test Page
</div>
</body>
</html>

Create HTML test page

# vi /var/www/html/index.html

<html>

<body>

Apache Test Page

</div>

</body>

</html>

If you access "http://[server IP address]" and the Test Page is displayed as shown below, it is OK.

1.3 Virtual Host Settings

Assign and configure the [FQDN] to be operated on the virtual host in the document root [/var/www/html/FQDN] directory

# vi /etc/httpd/conf.d/vhost.conf
 
<VirtualHost *:80>
DocumentRoot /var/www/html/[FQDN]
ServerName [FQDN]
ServerAdmin [Email Address] ←Administrator Email Address
ErrorLog logs/[FQDN]-error_log
CustomLog logs/[FQDN]-access_log combined
</VirtualHost>
 
<Directory "/var/www/html/[FQDN]">
Options FollowSymLinks
AllowOverride All
</Directory>

# vi /etc/httpd/conf.d/vhost.conf

DocumentRoot /var/www/html/[FQDN]

ServerName [FQDN]

ServerAdmin [Email Address] ←Administrator Email Address

ErrorLog logs/[FQDN]-error_log

CustomLog logs/[FQDN]-access_log combined

</VirtualHost>

Options FollowSymLinks

AllowOverride All

</Directory>

Creating a Document Directory

# mkdir /var/www/html/[FQDN]

1	# mkdir /var/www/html/[FQDN]

Apache restart

# systemctl restart httpd

1	# systemctl restart httpd

Create test pages and check operation

# vi /var/www/html/[FQDN]/index.html
<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: center;">
Virtual Host Test Page
</div>
</body>
</html>

# vi /var/www/html/[FQDN]/index.html

<html>

<body>

Virtual Host Test Page

</div>

</body>

</html>

If you access http://[FQDN]/index.html with a browser, the following screen should appear.

2. Ensure CGI Script Usage

①Confirmation of CGI availability

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf
252:    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
The above is displayed and available under "/var/www/cgi-bin/".

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf

252: ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

The above is displayed and available under "/var/www/cgi-bin/".

②Create test scripts and check operation

# vi /var/www/cgi-bin/index.cgi

#!/usr/bin/python3
print("Content-type: text/html\n")
print("CGI Script Test Page")

# vi /var/www/cgi-bin/index.cgi

#!/usr/bin/python3

print("Content-type: text/html\n")

print("CGI Script Test Page")

# chmod 755 /var/www/cgi-bin/index.cgi
# curl localhost/cgi-bin/index.cgi
CGI Script Test Page

# chmod 755 /var/www/cgi-bin/index.cgi

# curl localhost/cgi-bin/index.cgi

CGI Script Test Page

3. PHP installation and configuration

3.1.PHP Install

①Install

# dnf -y install php

1	# dnf -y install php

②Version Check

# php -v
PHP 8.4.5 (cli) (built: Mar 12 2025 01:55:56) (NTS gcc x86_64)
Copyright (c) The PHP Group
Built by Fedora Project
Zend Engine v4.4.5, Copyright (c) Zend Technologies
    with Zend OPcache v8.4.5, Copyright (c), by Zend Technologies

# php -v

PHP 8.4.5 (cli) (built: Mar 12 2025 01:55:56) (NTS gcc x86_64)

Built by Fedora Project

Zend Engine v4.4.5, Copyright (c) Zend Technologies

with Zend OPcache v8.4.5, Copyright (c), by Zend Technologies

Configure php-fpm

# systemctl enable php-fpm
Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.

1 2	# systemctl enable php-fpm Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.

# systemctl start php-fpm

1	# systemctl start php-fpm

③Apache restatrt
After PHP installation, restarting Apache will invoke PHP-FPM (FPM : FastCGI Process Manager) by default, and php-fpm service will be started in conjunction with httpd startup.

# systemctl restart httpd
# systemctl status php-fpm
● php-fpm.service - The PHP FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             mq10-timeout-abort.conf, 50-keep-warm.conf
     Active: active (running) since Wed 2025-04-16 14:35:06 JST; 14s ago
 Invocation: af93e056c60b4dd3b199295b751048a6
   Main PID: 2916 (php-fpm)
     Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0.00req/sec"
      Tasks: 6 (limit: 2246)
     Memory: 11.4M (peak: 11.7M)
        CPU: 46ms
     CGroup: /system.slice/php-fpm.service
             tq2916 "php-fpm: master process (/etc/php-fpm.conf)"
             tq2918 "php-fpm: pool www"
             tq2919 "php-fpm: pool www"
             tq2920 "php-fpm: pool www"
             tq2921 "php-fpm: pool www"
             mq2922 "php-fpm: pool www"

Apr 16 14:35:06 Lepard systemd[1]: Starting php-fpm.service - The PHP FastCGI Process Manager...
Apr 16 14:35:06 Lepard systemd[1]: Started php-fpm.service - The PHP FastCGI Process Manager.

# systemctl restart httpd

# systemctl status php-fpm

● php-fpm.service - The PHP FastCGI Process Manager

Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)

Drop-In: /usr/lib/systemd/system/service.d

mq10-timeout-abort.conf, 50-keep-warm.conf

Active: active (running) since Wed 2025-04-16 14:35:06 JST; 14s ago

Invocation: af93e056c60b4dd3b199295b751048a6

Main PID: 2916 (php-fpm)

Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0.00req/sec"

Tasks: 6 (limit: 2246)

Memory: 11.4M (peak: 11.7M)

CPU: 46ms

CGroup: /system.slice/php-fpm.service

tq2916 "php-fpm: master process (/etc/php-fpm.conf)"

tq2918 "php-fpm: pool www"

tq2919 "php-fpm: pool www"

tq2920 "php-fpm: pool www"

tq2921 "php-fpm: pool www"

mq2922 "php-fpm: pool www"

Apr 16 14:35:06 Lepard systemd[1]: Starting php-fpm.service - The PHP FastCGI Process Manager...

Apr 16 14:35:06 Lepard systemd[1]: Started php-fpm.service - The PHP FastCGI Process Manager.

④Confirmation of PHP operation
Create the following file

# vi /var/www/html/[FQDN]/test.php
<?php phpinfo(); ?>

1 2	# vi /var/www/html/[FQDN]/test.php <?php phpinfo(); ?>

Access http://[FQDN]/test.php and if the following screen appears, OK

4. Digest authentication in Apache2

Since Basic Authentication, a well-known authentication authentication method for http, transmits authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.
On the other hand, Digest Authentication encrypts the authentication information and sends it in encrypted form, so there is almost no risk of information leakage

4.1 Create password file for Digest authentication

Specify an authenticated area called realm. This realm allows the same directory to be accessed as authenticated.
As an example, we will create a user named "secretuser" and a password file ".digestauth" with "DigestAuth" as the realm. Execute the following command and enter the password for "secretuser" when prompted.

# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

1	# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

Confirmation

# cat /etc/httpd/.digestauth
secretuser:DigestAuth:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

1 2	# cat /etc/httpd/.digestauth secretuser:DigestAuth:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

As above, secretuser and encrypted password are created

4.2 Edit Apache configuration file

Specify the directory to which Digest authentication will be applied. (In this case, specify the secret directory.)

# vi /etc/httpd/conf/httpd.conf

1	# vi /etc/httpd/conf/httpd.conf

Add the following at the end

<Directory "/var/www/html/[FQDN]/secret">
AuthType Digest
AuthName "DigestAuth"
AuthDigestDomain /[FQDN]/secret/
AuthUserFile "/etc/httpd/.digestauth"
Require valid-user
</Directory>