Secure Apache Install

[Darthv15]

Hi guys, I have been having trouble with a secure Apache install. I thought I had it working but all I can get is regular old Apache to work. There is hardly any good sites out there to help me with this. I am a Linux newbie and don't know much more than basic scripting, compiling, and installing programs. This has been a huge task for me as I have received no help from my superiors in this matter. I only have a few Unix/Linux Sys Admin books and they aren't helpful in this problem at all. Is there any sites out there that have a complete walkthrough of this process? I need help down to every detail and it seems most Linux help I have found so far leaves much to be discovered on your own. Any and all help would be much appreciated. Thank you.

[krohnjw]

Secure as in how.

If you mean secure as in https....then that is in the config and the port just has to be opened.

If you mean secure as in jailed and locked down that's another story. You can search google for jailing apache or chroot apache and you should get a plethora of information including walkthroughs.

Here's a few quick links to look through
Basic security:
http://linuxplanet.com/linuxplanet/print/1527/
chroot:
http://penguin.epfl.ch/chroot.html

[Darthv15]

Yes krohnjw, I should have said https. I have read the config file and done everything as I thought I should have, even made the certificate and such. How do I open the port for it? I don't think I saw that anywhere in the config file. I also read something about starting this by using /usr/local/apache/bin/apachectl startssl. Is this right, because that wasn't anywhere in the config file either I read that off a internet site. If this is the way to start it, when I try that it doesn't work and gives me an argument. Would this be the result of not installing it and configuring it right, or just not having the port open? Thanks a lot.

[krohnjw]

double post

[krohnjw]

You may need to open the port if you use an iptables firewall, or ipchains.

Check this link out for a bit more detail on setting up apache with SSL
http://www.securityfocus.com/infocus/1356