MiracleLinux9.2 ; WEB Server(Apache2) Install

Contents

1.Apache2 Install / Virtual Hosts
2. Confirmation of CGI script use
3. PHP installation and configuration
- 3.1.PHP Install
4. Digest authentication with Apache2
- 4.1 Create password file for Digest authentication
- 4.2 Edit Apache configuration file

1.Apache2 Install / Virtual Hosts

1.1 Apache2

①httpd install

# dnf -y install httpd

Version Check
# httpd -v
Server version: Apache/2.4.53 (MIRACLE LINUX)
Server built:   Apr 28 2023 00:00:00

# dnf -y install httpd

Version Check

# httpd -v

Server version: Apache/2.4.53 (MIRACLE LINUX)

Server built: Apr 28 2023 00:00:00

1.2 Apache Configuration

①Edit httpd.conf file

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak
# vi /etc/httpd/conf/httpd.conf
●Line 91 : Administrator's email address
ServerAdmin [Email Address]
●Per line 100 : ServerName change
 #ServerName www.example.com:80
 ServerName [Domai name]
●Line 149 : Change (Delete Indexes)
Options FollowSymLinks
●Line 156 : Change
AllowOverride All
●Line 169 : File names accessible by directory name only
Add "index.php index.cgi index.htm"
●Add to the last line
ServerTokens Prod

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak

# vi /etc/httpd/conf/httpd.conf

●Line 91 : Administrator's email address

ServerAdmin [Email Address]

●Per line 100 : ServerName change

#ServerName www.example.com:80

ServerName [Domai name]

●Line 149 : Change (Delete Indexes)

Options FollowSymLinks

●Line 156 : Change

AllowOverride All

●Line 169 : File names accessible by directory name only

Add "index.php index.cgi index.htm"

●Add to the last line

ServerTokens Prod

②If Firewalld is enabled, HTTP service permission is required; HTTP uses [80/TCP]

# firewall-cmd --add-service=http --permanent
# firewall-cmd --add-service=https --permanent
# firewall-cmd --reload

# firewall-cmd --add-service=http --permanent

# firewall-cmd --add-service=https --permanent

# firewall-cmd --reload

③Apache Auto-Start Configuration

# systemctl start httpd
# systemctl enable httpd
# systemctl status httpd
● httpd.service - The Apache HTTP Server
     Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: di>
     Active: active (running) since Fri 2023-10-20 09:25:11 JST; 14s ago
       Docs: man:httpd.service(8)
   Main PID: 6649 (httpd)
     Status: "Total requests: 0; Idle/Busy workers 100/0;Requests/sec: 0; Bytes>
      Tasks: 213 (limit: 23011)
     Memory: 23.6M
        CPU: 50ms
     CGroup: /system.slice/httpd.service
             tq6649 /usr/sbin/httpd -DFOREGROUND
             tq6725 /usr/sbin/httpd -DFOREGROUND
             tq6726 /usr/sbin/httpd -DFOREGROUND
             tq6727 /usr/sbin/httpd -DFOREGROUND
             mq6728 /usr/sbin/httpd -DFOREGROUND

Oct 20 09:25:11 Lepard systemd[1]: Starting The Apache HTTP Server...
Oct 20 09:25:11 Lepard httpd[6649]: Server configured, listening on: port 80
Oct 20 09:25:11 Lepard systemd[1]: Started The Apache HTTP Server.

# systemctl start httpd

# systemctl enable httpd

# systemctl status httpd

● httpd.service - The Apache HTTP Server

Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; preset: di>

Active: active (running) since Fri 2023-10-20 09:25:11 JST; 14s ago

Docs: man:httpd.service(8)

Main PID: 6649 (httpd)

Status: "Total requests: 0; Idle/Busy workers 100/0;Requests/sec: 0; Bytes>

Tasks: 213 (limit: 23011)

Memory: 23.6M

CPU: 50ms

CGroup: /system.slice/httpd.service

tq6649 /usr/sbin/httpd -DFOREGROUND

tq6725 /usr/sbin/httpd -DFOREGROUND

tq6726 /usr/sbin/httpd -DFOREGROUND

tq6727 /usr/sbin/httpd -DFOREGROUND

mq6728 /usr/sbin/httpd -DFOREGROUND

Oct 20 09:25:11 Lepard systemd[1]: Starting The Apache HTTP Server...

Oct 20 09:25:11 Lepard httpd[6649]: Server configured, listening on: port 80

Oct 20 09:25:11 Lepard systemd[1]: Started The Apache HTTP Server.

④operation check
If you access http://[server IP address] and MiracleLinux Test Page is displayed as follows, it is OK.

⑤Hide the Welcome page, create a new index.html file as a Test Page, and check the operation of apache.

Rename the welcome page

# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

1	# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

Create HTML test page
# vi /var/www/html/index.html
<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: center;">
Apache Test Page
</div>
</body>
</html>

Create HTML test page

# vi /var/www/html/index.html

<html>

<body>

Apache Test Page

</div>

</body>

</html>

If you access "http://<server IP address> "and the Test Page is displayed as shown below, it is OK.

1.3 Virtual Host Settings

Assign and configure the domain name [miracle.korodes.com] to the document root [/var/www/html/miracle.korodes.com] directory for virtual host operation

# vi /etc/httpd/conf.d/vhost.conf

<VirtualHost *:80>
DocumentRoot /var/www/html/miracle.korodes.com
ServerName miracle.korodes.com
ServerAdmin [Email Address] ←Administrator's email address
ErrorLog logs/miracle.korodes.com-error_log
CustomLog logs/miracle.korodes.com-access_log combined
</VirtualHost>

<Directory "/var/www/html/miracle.korodes.com">
Options FollowSymLinks
AllowOverride All
</Directory>

# vi /etc/httpd/conf.d/vhost.conf

DocumentRoot /var/www/html/miracle.korodes.com

ServerName miracle.korodes.com

ServerAdmin [Email Address] ←Administrator's email address

ErrorLog logs/miracle.korodes.com-error_log

CustomLog logs/miracle.korodes.com-access_log combined

</VirtualHost>

Options FollowSymLinks

AllowOverride All

</Directory>

Creating a Document Directory

# mkdir /var/www/html/miracle.korodes.com

1	# mkdir /var/www/html/miracle.korodes.com

Restart Apache

# systemctl restart httpd

1	# systemctl restart httpd

Create test pages and check operation

# vi /var/www/html/miracle.korodes.com/index.html
<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: center;">
Virtual Host Test Page
</div>
</body>
</html>

# vi /var/www/html/miracle.korodes.com/index.html

<html>

<body>

Virtual Host Test Page

</div>

</body>

</html>

If the following screen appears when you access "http://miracle.korodes.com/index.html", it is normal.

2. Confirmation of CGI script use

①Confirmation of CGI availability

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf
252:    ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
The above is displayed and available under "/var/www/cgi-bin/".

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf

252: ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

The above is displayed and available under "/var/www/cgi-bin/".

②Create test scripts and check operation

# vi /var/www/cgi-bin/index.cgi

#!/usr/libexec/platform-python
print("Content-type: text/html\n")
print("CGI Script Test Page")

# vi /var/www/cgi-bin/index.cgi

#!/usr/libexec/platform-python

print("Content-type: text/html\n")

print("CGI Script Test Page")

# chmod 755 /var/www/cgi-bin/index.cgi
# curl localhost/cgi-bin/index.cgi
CGI Script Test Page

# chmod 755 /var/www/cgi-bin/index.cgi

# curl localhost/cgi-bin/index.cgi

CGI Script Test Page

3. PHP installation and configuration

3.1.PHP Install

①Install

# dnf -y install php

1	# dnf -y install php

②Version Check

# php -v
PHP 8.0.27 (cli) (built: Jan  3 2023 16:17:26) ( NTS gcc x86_64 )
Copyright (c) The PHP Group
Zend Engine v4.0.27, Copyright (c) Zend Technologies
    with Zend OPcache v8.0.27, Copyright (c), by Zend Technologies

# php -v

PHP 8.0.27 (cli) (built: Jan 3 2023 16:17:26) ( NTS gcc x86_64 )

Zend Engine v4.0.27, Copyright (c) Zend Technologies

with Zend OPcache v8.0.27, Copyright (c), by Zend Technologies

If you are upgrading to PHP 8.2, you will need the Remi repository, so install it if you have not already done so.

# dnf -y install https://rpms.remirepo.net/enterprise/remi-release-9.rpm

1	# dnf -y install https://rpms.remirepo.net/enterprise/remi-release-9.rpm

Stop PHP once.

# dnf module disable php

1	# dnf module disable php

PHP 8.2 Install

# dnf module install php:remi-8.2

1	# dnf module install php:remi-8.2

php-fpm configuration

# systemctl enable php-fpm
Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.

1 2	# systemctl enable php-fpm Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.

# systemctl start php-fpm
# php -v
PHP 8.2.11 (cli) (built: Sep 26 2023 11:11:58) (NTS gcc x86_64)
Copyright (c) The PHP Group
Zend Engine v4.2.11, Copyright (c) Zend Technologies
    with Zend OPcache v8.2.11, Copyright (c), by Zend Technologies

# systemctl start php-fpm

# php -v

PHP 8.2.11 (cli) (built: Sep 26 2023 11:11:58) (NTS gcc x86_64)

Zend Engine v4.2.11, Copyright (c) Zend Technologies

with Zend OPcache v8.2.11, Copyright (c), by Zend Technologies

If the version is updated to 8.2, OK.

③Restart Apache
After PHP installation, restarting Apache will invoke PHP-FPM (FPM : FastCGI Process Manager) by default, and php-fpm service will be started in conjunction with httpd startup.

# systemctl restart httpd
# systemctl status php-fpm
● php-fpm.service - The PHP FastCGI Process Manager
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)
     Active: active (running) since Fri 2023-10-20 09:59:35 JST; 41s ago
   Main PID: 10001 (php-fpm)
     Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0req/sec"
      Tasks: 6 (limit: 23011)
     Memory: 12.5M
        CPU: 37ms
     CGroup: /system.slice/php-fpm.service
             tq10001 "php-fpm: master process (/etc/php-fpm.conf)"
             tq10002 "php-fpm: pool www"
             tq10003 "php-fpm: pool www"
             tq10004 "php-fpm: pool www"
             tq10005 "php-fpm: pool www"
             mq10006 "php-fpm: pool www"

Oct 20 09:59:35 Lepard systemd[1]: Starting The PHP FastCGI Process Manager...
Oct 20 09:59:35 Lepard systemd[1]: Started The PHP FastCGI Process Manager.

# systemctl restart httpd

# systemctl status php-fpm

● php-fpm.service - The PHP FastCGI Process Manager

Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)

Active: active (running) since Fri 2023-10-20 09:59:35 JST; 41s ago

Main PID: 10001 (php-fpm)

Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0req/sec"

Tasks: 6 (limit: 23011)

Memory: 12.5M

CPU: 37ms

CGroup: /system.slice/php-fpm.service

tq10001 "php-fpm: master process (/etc/php-fpm.conf)"

tq10002 "php-fpm: pool www"

tq10003 "php-fpm: pool www"

tq10004 "php-fpm: pool www"

tq10005 "php-fpm: pool www"

mq10006 "php-fpm: pool www"

Oct 20 09:59:35 Lepard systemd[1]: Starting The PHP FastCGI Process Manager...

Oct 20 09:59:35 Lepard systemd[1]: Started The PHP FastCGI Process Manager.

④Confirmation of PHP operation
Create the following file

# vi /var/www/html/[FQDN]/test.php
<?php phpinfo(); ?>

1 2	# vi /var/www/html/[FQDN]/test.php <?php phpinfo(); ?>

If you access http://<domain name>/test.php in your browser and see the following screen, it is OK

4. Digest authentication with Apache2

Since Basic Authentication, a well-known authentication authorization method for http, sends authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.
On the other hand, Digest Authentication encrypts and transmits authentication information, so there is almost no risk of information leakage.

4.1 Create password file for Digest authentication

Specify an authenticated area called realm. This realm allows the same directory to be accessed as authenticated.
For this example, the realm is "DigestAuth" and a user and password file named "secretuser" ".digestauth" is created.

# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

1	# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

Confirmation

# cat /etc/httpd/.digestauth
secretuser:DigestAuth:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

1 2	# cat /etc/httpd/.digestauth secretuser:DigestAuth:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

As above, secretuser and encrypted password are created

4.2 Edit Apache configuration file

Specify the directory to which Digest authentication will be applied. (In this case, specify the "secret" directory.)

# vi /etc/httpd/conf/httpd.conf

1	# vi /etc/httpd/conf/httpd.conf

Add the following at the end

<Directory "/var/www/html/[FQDN]/secret">
AuthType Digest
AuthName "DigestAuth"
AuthDigestDomain /[FQDN]/secret/
AuthUserFile "/etc/httpd/.digestauth"
Require valid-user
</Directory>