SHOW:
|
|
- or go back to the newest paste.
| 1 | [saatvik@BlackSheep ~]$ ssh [email protected] | |
| 2 | [email protected]'s password: | |
| 3 | Last login: Sat Jan 16 17:37:29 2016 from 45.114.61.152 | |
| 4 | [root@TheLegacyServer ~]# sudo yum install httpd mod_ssl | |
| 5 | Loaded plugins: fastestmirror | |
| 6 | Loading mirror speeds from cached hostfile | |
| 7 | * base: ftp.plusline.de | |
| 8 | * epel: mirrors.n-ix.net | |
| 9 | - | . |
| 9 | + | * extras: ftp.plusline.de |
| 10 | - | . skipped installation detail |
| 10 | + | * updates: ftp.plusline.de |
| 11 | - | . |
| 11 | + | Resolving Dependencies |
| 12 | - | . |
| 12 | + | --> Running transaction check |
| 13 | ---> Package httpd.x86_64 0:2.4.6-40.el7.centos will be installed | |
| 14 | --> Processing Dependency: httpd-tools = 2.4.6-40.el7.centos for package: httpd-2.4.6-40.el7.centos.x86_64 | |
| 15 | --> Processing Dependency: /etc/mime.types for package: httpd-2.4.6-40.el7.centos.x86_64 | |
| 16 | ---> Package mod_ssl.x86_64 1:2.4.6-40.el7.centos will be installed | |
| 17 | --> Running transaction check | |
| 18 | ---> Package httpd-tools.x86_64 0:2.4.6-40.el7.centos will be installed | |
| 19 | - | /* file contents*/ |
| 19 | + | ---> Package mailcap.noarch 0:2.1.41-2.el7 will be installed |
| 20 | --> Finished Dependency Resolution | |
| 21 | - | ProxyPass / http://localhost:8080/ nocanon |
| 21 | + | |
| 22 | - | ProxyPassReverse / http://localhost:8080/ |
| 22 | + | Dependencies Resolved |
| 23 | - | ProxyRequests Off |
| 23 | + | |
| 24 | - | AllowEncodedSlashes NoDecode |
| 24 | + | ===================================================================================================================================================== |
| 25 | Package Arch Version Repository Size | |
| 26 | - | # Local reverse proxy authorization override |
| 26 | + | ===================================================================================================================================================== |
| 27 | - | <Proxy http://localhost:8080/*> |
| 27 | + | Installing: |
| 28 | - | Order deny,allow |
| 28 | + | httpd x86_64 2.4.6-40.el7.centos base 2.7 M |
| 29 | - | Allow from all |
| 29 | + | mod_ssl x86_64 1:2.4.6-40.el7.centos base 103 k |
| 30 | - | </Proxy> |
| 30 | + | Installing for dependencies: |
| 31 | httpd-tools x86_64 2.4.6-40.el7.centos base 82 k | |
| 32 | - | // 8080 is the current port where jenkins is listening |
| 32 | + | mailcap noarch 2.1.41-2.el7 base 31 k |
| 33 | - | /* content end */ |
| 33 | + | |
| 34 | Transaction Summary | |
| 35 | - | [root@TheLegacyServer jenkins]# setsebool -P httpd_can_network_connect true // Only needed if selinux is enabled |
| 35 | + | ===================================================================================================================================================== |
| 36 | Install 2 Packages (+2 Dependent packages) | |
| 37 | ||
| 38 | Total download size: 2.9 M | |
| 39 | - | Redirecting to /bin/systemctl restart httpd.service |
| 39 | + | Installed size: 9.8 M |
| 40 | Is this ok [y/d/N]: y | |
| 41 | Is this ok [y/d/N]: y | |
| 42 | Downloading packages: | |
| 43 | (1/4): httpd-tools-2.4.6-40.el7.centos.x86_64.rpm | 82 kB 00:00:00 | |
| 44 | (2/4): httpd-2.4.6-40.el7.centos.x86_64.rpm | 2.7 MB 00:00:00 | |
| 45 | (3/4): mailcap-2.1.41-2.el7.noarch.rpm | 31 kB 00:00:00 | |
| 46 | (4/4): mod_ssl-2.4.6-40.el7.centos.x86_64.rpm | 103 kB 00:00:00 | |
| 47 | ----------------------------------------------------------------------------------------------------------------------------------------------------- | |
| 48 | Total 5.2 MB/s | 2.9 MB 00:00:00 | |
| 49 | Running transaction check | |
| 50 | Running transaction test | |
| 51 | Transaction test succeeded | |
| 52 | Running transaction | |
| 53 | Installing : httpd-tools-2.4.6-40.el7.centos.x86_64 1/4 | |
| 54 | Installing : mailcap-2.1.41-2.el7.noarch 2/4 | |
| 55 | Installing : httpd-2.4.6-40.el7.centos.x86_64 3/4 | |
| 56 | Installing : 1:mod_ssl-2.4.6-40.el7.centos.x86_64 4/4 | |
| 57 | Verifying : httpd-2.4.6-40.el7.centos.x86_64 1/4 | |
| 58 | Verifying : mailcap-2.1.41-2.el7.noarch 2/4 | |
| 59 | Verifying : 1:mod_ssl-2.4.6-40.el7.centos.x86_64 3/4 | |
| 60 | Verifying : httpd-tools-2.4.6-40.el7.centos.x86_64 4/4 | |
| 61 | ||
| 62 | Installed: | |
| 63 | httpd.x86_64 0:2.4.6-40.el7.centos mod_ssl.x86_64 1:2.4.6-40.el7.centos | |
| 64 | ||
| 65 | Dependency Installed: | |
| 66 | httpd-tools.x86_64 0:2.4.6-40.el7.centos mailcap.noarch 0:2.1.41-2.el7 | |
| 67 | ||
| 68 | Complete! | |
| 69 | [root@TheLegacyServer ~]# sudo /usr/sbin/apachectl start | |
| 70 | [root@TheLegacyServer ~]# | |
| 71 | [root@TheLegacyServer ~]# wget http://ipinfo.io/ip -qO - | |
| 72 | 144.76.38.11 | |
| 73 | [root@TheLegacyServer ~]# sudo nano /etc/httpd/conf/httpd.conf | |
| 74 | [root@TheLegacyServer ~]# a2enmod proxy | |
| 75 | -bash: a2enmod: command not found | |
| 76 | [root@TheLegacyServer ~]# yum install a2enmod proxy | |
| 77 | ||
| 78 | ^CTraceback (most recent call last): | |
| 79 | File "/usr/bin/yum", line 4, in <module> | |
| 80 | import yum | |
| 81 | File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 44, in <module> | |
| 82 | import logging | |
| 83 | File "/usr/lib64/python2.7/logging/__init__.py", line 26, in <module> | |
| 84 | import sys, os, time, cStringIO, traceback, warnings, weakref | |
| 85 | KeyboardInterrupt | |
| 86 | [root@TheLegacyServer ~]# yum install a2enmod | |
| 87 | Loaded plugins: fastestmirror | |
| 88 | Loading mirror speeds from cached hostfile | |
| 89 | * base: ftp.plusline.de | |
| 90 | * epel: mirrors.n-ix.net | |
| 91 | * extras: ftp.plusline.de | |
| 92 | * updates: ftp.plusline.de | |
| 93 | No package a2enmod available. | |
| 94 | Error: Nothing to do | |
| 95 | [root@TheLegacyServer ~]# cd /etc/httpd/conf.d/ | |
| 96 | [root@TheLegacyServer conf.d]# ls | |
| 97 | autoindex.conf README ssl.conf userdir.conf welcome.conf | |
| 98 | [root@TheLegacyServer conf.d]# cat | |
| 99 | ^Z | |
| 100 | [1]+ Stopped cat | |
| 101 | [root@TheLegacyServer conf.d]# cat * | |
| 102 | # | |
| 103 | # Directives controlling the display of server-generated directory listings. | |
| 104 | # | |
| 105 | # Required modules: mod_authz_core, mod_authz_host, | |
| 106 | # mod_autoindex, mod_alias | |
| 107 | # | |
| 108 | # To see the listing of a directory, the Options directive for the | |
| 109 | # directory must include "Indexes", and the directory must not contain | |
| 110 | # a file matching those listed in the DirectoryIndex directive. | |
| 111 | # | |
| 112 | ||
| 113 | # | |
| 114 | # IndexOptions: Controls the appearance of server-generated directory | |
| 115 | # listings. | |
| 116 | # | |
| 117 | IndexOptions FancyIndexing HTMLTable VersionSort | |
| 118 | ||
| 119 | # We include the /icons/ alias for FancyIndexed directory listings. If | |
| 120 | # you do not use FancyIndexing, you may comment this out. | |
| 121 | # | |
| 122 | Alias /icons/ "/usr/share/httpd/icons/" | |
| 123 | ||
| 124 | <Directory "/usr/share/httpd/icons"> | |
| 125 | Options Indexes MultiViews FollowSymlinks | |
| 126 | AllowOverride None | |
| 127 | Require all granted | |
| 128 | </Directory> | |
| 129 | ||
| 130 | # | |
| 131 | # AddIcon* directives tell the server which icon to show for different | |
| 132 | # files or filename extensions. These are only displayed for | |
| 133 | # FancyIndexed directories. | |
| 134 | # | |
| 135 | AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip | |
| 136 | ||
| 137 | AddIconByType (TXT,/icons/text.gif) text/* | |
| 138 | AddIconByType (IMG,/icons/image2.gif) image/* | |
| 139 | AddIconByType (SND,/icons/sound2.gif) audio/* | |
| 140 | AddIconByType (VID,/icons/movie.gif) video/* | |
| 141 | ||
| 142 | AddIcon /icons/binary.gif .bin .exe | |
| 143 | AddIcon /icons/binhex.gif .hqx | |
| 144 | AddIcon /icons/tar.gif .tar | |
| 145 | AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv | |
| 146 | AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip | |
| 147 | AddIcon /icons/a.gif .ps .ai .eps | |
| 148 | AddIcon /icons/layout.gif .html .shtml .htm .pdf | |
| 149 | AddIcon /icons/text.gif .txt | |
| 150 | AddIcon /icons/c.gif .c | |
| 151 | AddIcon /icons/p.gif .pl .py | |
| 152 | AddIcon /icons/f.gif .for | |
| 153 | AddIcon /icons/dvi.gif .dvi | |
| 154 | AddIcon /icons/uuencoded.gif .uu | |
| 155 | AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl | |
| 156 | AddIcon /icons/tex.gif .tex | |
| 157 | AddIcon /icons/bomb.gif /core | |
| 158 | AddIcon /icons/bomb.gif */core.* | |
| 159 | ||
| 160 | AddIcon /icons/back.gif .. | |
| 161 | AddIcon /icons/hand.right.gif README | |
| 162 | AddIcon /icons/folder.gif ^^DIRECTORY^^ | |
| 163 | AddIcon /icons/blank.gif ^^BLANKICON^^ | |
| 164 | ||
| 165 | # | |
| 166 | # DefaultIcon is which icon to show for files which do not have an icon | |
| 167 | # explicitly set. | |
| 168 | # | |
| 169 | DefaultIcon /icons/unknown.gif | |
| 170 | ||
| 171 | # | |
| 172 | # AddDescription allows you to place a short description after a file in | |
| 173 | # server-generated indexes. These are only displayed for FancyIndexed | |
| 174 | # directories. | |
| 175 | # Format: AddDescription "description" filename | |
| 176 | # | |
| 177 | #AddDescription "GZIP compressed document" .gz | |
| 178 | #AddDescription "tar archive" .tar | |
| 179 | #AddDescription "GZIP compressed tar archive" .tgz | |
| 180 | ||
| 181 | # | |
| 182 | # ReadmeName is the name of the README file the server will look for by | |
| 183 | # default, and append to directory listings. | |
| 184 | # | |
| 185 | # HeaderName is the name of a file which should be prepended to | |
| 186 | # directory indexes. | |
| 187 | ReadmeName README.html | |
| 188 | HeaderName HEADER.html | |
| 189 | ||
| 190 | # | |
| 191 | # IndexIgnore is a set of filenames which directory indexing should ignore | |
| 192 | # and not include in the listing. Shell-style wildcarding is permitted. | |
| 193 | # | |
| 194 | IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t | |
| 195 | ||
| 196 | ||
| 197 | This directory holds configuration files for the Apache HTTP Server; | |
| 198 | any files in this directory which have the ".conf" extension will be | |
| 199 | processed as httpd configuration files. The directory is used in | |
| 200 | addition to the directory /etc/httpd/conf.modules.d/, which contains | |
| 201 | configuration files necessary to load modules. | |
| 202 | ||
| 203 | Files are processed in alphabetical order. | |
| 204 | ||
| 205 | # | |
| 206 | # When we also provide SSL we have to listen to the | |
| 207 | # the HTTPS port in addition. | |
| 208 | # | |
| 209 | Listen 443 https | |
| 210 | ||
| 211 | ## | |
| 212 | ## SSL Global Context | |
| 213 | ## | |
| 214 | ## All SSL configuration in this context applies both to | |
| 215 | ## the main server and all SSL-enabled virtual hosts. | |
| 216 | ## | |
| 217 | ||
| 218 | # Pass Phrase Dialog: | |
| 219 | # Configure the pass phrase gathering process. | |
| 220 | # The filtering dialog program (`builtin' is a internal | |
| 221 | # terminal dialog) has to provide the pass phrase on stdout. | |
| 222 | SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog | |
| 223 | ||
| 224 | # Inter-Process Session Cache: | |
| 225 | # Configure the SSL Session Cache: First the mechanism | |
| 226 | # to use and second the expiring timeout (in seconds). | |
| 227 | SSLSessionCache shmcb:/run/httpd/sslcache(512000) | |
| 228 | SSLSessionCacheTimeout 300 | |
| 229 | ||
| 230 | # Pseudo Random Number Generator (PRNG): | |
| 231 | # Configure one or more sources to seed the PRNG of the | |
| 232 | # SSL library. The seed data should be of good random quality. | |
| 233 | # WARNING! On some platforms /dev/random blocks if not enough entropy | |
| 234 | # is available. This means you then cannot use the /dev/random device | |
| 235 | # because it would lead to very long connection times (as long as | |
| 236 | # it requires to make more entropy available). But usually those | |
| 237 | # platforms additionally provide a /dev/urandom device which doesn't | |
| 238 | # block. So, if available, use this one instead. Read the mod_ssl User | |
| 239 | # Manual for more details. | |
| 240 | SSLRandomSeed startup file:/dev/urandom 256 | |
| 241 | SSLRandomSeed connect builtin | |
| 242 | #SSLRandomSeed startup file:/dev/random 512 | |
| 243 | #SSLRandomSeed connect file:/dev/random 512 | |
| 244 | #SSLRandomSeed connect file:/dev/urandom 512 | |
| 245 | ||
| 246 | # | |
| 247 | # Use "SSLCryptoDevice" to enable any supported hardware | |
| 248 | # accelerators. Use "openssl engine -v" to list supported | |
| 249 | # engine names. NOTE: If you enable an accelerator and the | |
| 250 | # server does not start, consult the error logs and ensure | |
| 251 | # your accelerator is functioning properly. | |
| 252 | # | |
| 253 | SSLCryptoDevice builtin | |
| 254 | #SSLCryptoDevice ubsec | |
| 255 | ||
| 256 | ## | |
| 257 | ## SSL Virtual Host Context | |
| 258 | ## | |
| 259 | ||
| 260 | <VirtualHost _default_:443> | |
| 261 | ||
| 262 | # General setup for the virtual host, inherited from global configuration | |
| 263 | #DocumentRoot "/var/www/html" | |
| 264 | #ServerName www.example.com:443 | |
| 265 | ||
| 266 | # Use separate log files for the SSL virtual host; note that LogLevel | |
| 267 | # is not inherited from httpd.conf. | |
| 268 | ErrorLog logs/ssl_error_log | |
| 269 | TransferLog logs/ssl_access_log | |
| 270 | LogLevel warn | |
| 271 | ||
| 272 | # SSL Engine Switch: | |
| 273 | # Enable/Disable SSL for this virtual host. | |
| 274 | SSLEngine on | |
| 275 | ||
| 276 | # SSL Protocol support: | |
| 277 | # List the enable protocol levels with which clients will be able to | |
| 278 | # connect. Disable SSLv2 access by default: | |
| 279 | SSLProtocol all -SSLv2 | |
| 280 | ||
| 281 | # SSL Cipher Suite: | |
| 282 | # List the ciphers that the client is permitted to negotiate. | |
| 283 | # See the mod_ssl documentation for a complete list. | |
| 284 | SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA | |
| 285 | ||
| 286 | # Speed-optimized SSL Cipher configuration: | |
| 287 | # If speed is your main concern (on busy HTTPS servers e.g.), | |
| 288 | # you might want to force clients to specific, performance | |
| 289 | # optimized ciphers. In this case, prepend those ciphers | |
| 290 | # to the SSLCipherSuite list, and enable SSLHonorCipherOrder. | |
| 291 | # Caveat: by giving precedence to RC4-SHA and AES128-SHA | |
| 292 | # (as in the example below), most connections will no longer | |
| 293 | # have perfect forward secrecy - if the server's key is | |
| 294 | # compromised, captures of past or future traffic must be | |
| 295 | # considered compromised, too. | |
| 296 | #SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5 | |
| 297 | #SSLHonorCipherOrder on | |
| 298 | ||
| 299 | # Server Certificate: | |
| 300 | # Point SSLCertificateFile at a PEM encoded certificate. If | |
| 301 | # the certificate is encrypted, then you will be prompted for a | |
| 302 | # pass phrase. Note that a kill -HUP will prompt again. A new | |
| 303 | # certificate can be generated using the genkey(1) command. | |
| 304 | SSLCertificateFile /etc/pki/tls/certs/localhost.crt | |
| 305 | ||
| 306 | # Server Private Key: | |
| 307 | # If the key is not combined with the certificate, use this | |
| 308 | # directive to point at the key file. Keep in mind that if | |
| 309 | # you've both a RSA and a DSA private key you can configure | |
| 310 | # both in parallel (to also allow the use of DSA ciphers, etc.) | |
| 311 | SSLCertificateKeyFile /etc/pki/tls/private/localhost.key | |
| 312 | ||
| 313 | # Server Certificate Chain: | |
| 314 | # Point SSLCertificateChainFile at a file containing the | |
| 315 | # concatenation of PEM encoded CA certificates which form the | |
| 316 | # certificate chain for the server certificate. Alternatively | |
| 317 | # the referenced file can be the same as SSLCertificateFile | |
| 318 | # when the CA certificates are directly appended to the server | |
| 319 | # certificate for convinience. | |
| 320 | #SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt | |
| 321 | ||
| 322 | # Certificate Authority (CA): | |
| 323 | # Set the CA certificate verification path where to find CA | |
| 324 | # certificates for client authentication or alternatively one | |
| 325 | # huge file containing all of them (file must be PEM encoded) | |
| 326 | #SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt | |
| 327 | ||
| 328 | # Client Authentication (Type): | |
| 329 | # Client certificate verification type and depth. Types are | |
| 330 | # none, optional, require and optional_no_ca. Depth is a | |
| 331 | # number which specifies how deeply to verify the certificate | |
| 332 | # issuer chain before deciding the certificate is not valid. | |
| 333 | #SSLVerifyClient require | |
| 334 | #SSLVerifyDepth 10 | |
| 335 | ||
| 336 | # Access Control: | |
| 337 | # With SSLRequire you can do per-directory access control based | |
| 338 | # on arbitrary complex boolean expressions containing server | |
| 339 | # variable checks and other lookup directives. The syntax is a | |
| 340 | # mixture between C and Perl. See the mod_ssl documentation | |
| 341 | # for more details. | |
| 342 | #<Location /> | |
| 343 | #SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
| |
| 344 | # and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
| |
| 345 | # and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
| |
| 346 | # and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
| |
| 347 | # and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
| |
| 348 | # or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
| |
| 349 | #</Location> | |
| 350 | ||
| 351 | # SSL Engine Options: | |
| 352 | # Set various options for the SSL engine. | |
| 353 | # o FakeBasicAuth: | |
| 354 | # Translate the client X.509 into a Basic Authorisation. This means that | |
| 355 | # the standard Auth/DBMAuth methods can be used for access control. The | |
| 356 | # user name is the `one line' version of the client's X.509 certificate. | |
| 357 | # Note that no password is obtained from the user. Every entry in the user | |
| 358 | # file needs this password: `xxj31ZMTZzkVA'. | |
| 359 | # o ExportCertData: | |
| 360 | # This exports two additional environment variables: SSL_CLIENT_CERT and | |
| 361 | # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the | |
| 362 | # server (always existing) and the client (only existing when client | |
| 363 | # authentication is used). This can be used to import the certificates | |
| 364 | # into CGI scripts. | |
| 365 | # o StdEnvVars: | |
| 366 | # This exports the standard SSL/TLS related `SSL_*' environment variables. | |
| 367 | # Per default this exportation is switched off for performance reasons, | |
| 368 | # because the extraction step is an expensive operation and is usually | |
| 369 | # useless for serving static content. So one usually enables the | |
| 370 | # exportation for CGI and SSI requests only. | |
| 371 | # o StrictRequire: | |
| 372 | # This denies access when "SSLRequireSSL" or "SSLRequire" applied even | |
| 373 | # under a "Satisfy any" situation, i.e. when it applies access is denied | |
| 374 | # and no other module can change it. | |
| 375 | # o OptRenegotiate: | |
| 376 | # This enables optimized SSL connection renegotiation handling when SSL | |
| 377 | # directives are used in per-directory context. | |
| 378 | #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire | |
| 379 | <Files ~ "\.(cgi|shtml|phtml|php3?)$"> | |
| 380 | SSLOptions +StdEnvVars | |
| 381 | </Files> | |
| 382 | <Directory "/var/www/cgi-bin"> | |
| 383 | SSLOptions +StdEnvVars | |
| 384 | </Directory> | |
| 385 | ||
| 386 | # SSL Protocol Adjustments: | |
| 387 | # The safe and default but still SSL/TLS standard compliant shutdown | |
| 388 | # approach is that mod_ssl sends the close notify alert but doesn't wait for | |
| 389 | # the close notify alert from client. When you need a different shutdown | |
| 390 | # approach you can use one of the following variables: | |
| 391 | # o ssl-unclean-shutdown: | |
| 392 | # This forces an unclean shutdown when the connection is closed, i.e. no | |
| 393 | # SSL close notify alert is send or allowed to received. This violates | |
| 394 | # the SSL/TLS standard but is needed for some brain-dead browsers. Use | |
| 395 | # this when you receive I/O errors because of the standard approach where | |
| 396 | # mod_ssl sends the close notify alert. | |
| 397 | # o ssl-accurate-shutdown: | |
| 398 | # This forces an accurate shutdown when the connection is closed, i.e. a | |
| 399 | # SSL close notify alert is send and mod_ssl waits for the close notify | |
| 400 | # alert of the client. This is 100% SSL/TLS standard compliant, but in | |
| 401 | # practice often causes hanging connections with brain-dead browsers. Use | |
| 402 | # this only for browsers where you know that their SSL implementation | |
| 403 | # works correctly. | |
| 404 | # Notice: Most problems of broken clients are also related to the HTTP | |
| 405 | # keep-alive facility, so you usually additionally want to disable | |
| 406 | # keep-alive for those clients, too. Use variable "nokeepalive" for this. | |
| 407 | # Similarly, one has to force some clients to use HTTP/1.0 to workaround | |
| 408 | # their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and | |
| 409 | # "force-response-1.0" for this. | |
| 410 | BrowserMatch "MSIE [2-5]" \ | |
| 411 | nokeepalive ssl-unclean-shutdown \ | |
| 412 | downgrade-1.0 force-response-1.0 | |
| 413 | ||
| 414 | # Per-Server Logging: | |
| 415 | # The home of a custom SSL log file. Use this when you want a | |
| 416 | # compact non-error SSL logfile on a virtual host basis. | |
| 417 | CustomLog logs/ssl_request_log \ | |
| 418 | "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
| |
| 419 | ||
| 420 | </VirtualHost> | |
| 421 | ||
| 422 | # | |
| 423 | # UserDir: The name of the directory that is appended onto a user's home | |
| 424 | # directory if a ~user request is received. | |
| 425 | # | |
| 426 | # The path to the end user account 'public_html' directory must be | |
| 427 | # accessible to the webserver userid. This usually means that ~userid | |
| 428 | # must have permissions of 711, ~userid/public_html must have permissions | |
| 429 | # of 755, and documents contained therein must be world-readable. | |
| 430 | # Otherwise, the client will only receive a "403 Forbidden" message. | |
| 431 | # | |
| 432 | <IfModule mod_userdir.c> | |
| 433 | # | |
| 434 | # UserDir is disabled by default since it can confirm the presence | |
| 435 | # of a username on the system (depending on home directory | |
| 436 | # permissions). | |
| 437 | # | |
| 438 | UserDir disabled | |
| 439 | ||
| 440 | # | |
| 441 | # To enable requests to /~user/ to serve the user's public_html | |
| 442 | # directory, remove the "UserDir disabled" line above, and uncomment | |
| 443 | # the following line instead: | |
| 444 | # | |
| 445 | #UserDir public_html | |
| 446 | </IfModule> | |
| 447 | ||
| 448 | # | |
| 449 | # Control access to UserDir directories. The following is an example | |
| 450 | # for a site where these directories are restricted to read-only. | |
| 451 | # | |
| 452 | <Directory "/home/*/public_html"> | |
| 453 | AllowOverride FileInfo AuthConfig Limit Indexes | |
| 454 | Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec | |
| 455 | Require method GET POST OPTIONS | |
| 456 | </Directory> | |
| 457 | ||
| 458 | # | |
| 459 | # This configuration file enables the default "Welcome" page if there | |
| 460 | # is no default index page present for the root URL. To disable the | |
| 461 | # Welcome page, comment out all the lines below. | |
| 462 | # | |
| 463 | # NOTE: if this file is removed, it will be restored on upgrades. | |
| 464 | # | |
| 465 | <LocationMatch "^/+$"> | |
| 466 | Options -Indexes | |
| 467 | ErrorDocument 403 /.noindex.html | |
| 468 | </LocationMatch> | |
| 469 | ||
| 470 | <Directory /usr/share/httpd/noindex> | |
| 471 | AllowOverride None | |
| 472 | Require all granted | |
| 473 | </Directory> | |
| 474 | ||
| 475 | Alias /.noindex.html /usr/share/httpd/noindex/index.html | |
| 476 | Alias /noindex/css/bootstrap.min.css /usr/share/httpd/noindex/css/bootstrap.min.css | |
| 477 | Alias /noindex/css/open-sans.css /usr/share/httpd/noindex/css/open-sans.css | |
| 478 | Alias /images/apache_pb.gif /usr/share/httpd/noindex/images/apache_pb.gif | |
| 479 | Alias /images/poweredby.png /usr/share/httpd/noindex/images/poweredby.png | |
| 480 | [root@TheLegacyServer conf.d]# LoadModule proxy_module libexec/apache2/mod_proxy.so | |
| 481 | -bash: LoadModule: command not found | |
| 482 | [root@TheLegacyServer conf.d]# nano /etc/httpd/conf/httpd.conf | |
| 483 | [root@TheLegacyServer conf.d]# clear | |
| 484 | [3;J | |
| 485 | [root@TheLegacyServer conf.d]# yum install httpd mod_ssl | |
| 486 | Loaded plugins: fastestmirror | |
| 487 | Loading mirror speeds from cached hostfile | |
| 488 | * base: ftp.plusline.de | |
| 489 | * epel: mirrors.n-ix.net | |
| 490 | * extras: ftp.plusline.de | |
| 491 | * updates: ftp.plusline.de | |
| 492 | Package httpd-2.4.6-40.el7.centos.x86_64 already installed and latest version | |
| 493 | Package 1:mod_ssl-2.4.6-40.el7.centos.x86_64 already installed and latest version | |
| 494 | Nothing to do | |
| 495 | [root@TheLegacyServer conf.d]# nano /etc/httpd/conf.d/reverse-proxy.conf | |
| 496 | [root@TheLegacyServer conf.d]# cd /var/lib/jenkins | |
| 497 | [root@TheLegacyServer jenkins]# | |
| 498 | [root@TheLegacyServer jenkins]# ls | |
| 499 | config.xml hudson.tasks.Maven.xml nodeMonitors.xml | |
| 500 | Download metadata.log hudson.tasks.Shell.xml nodes | |
| 501 | Fingerprint cleanup.log hudson.triggers.SCMTrigger.xml plugins | |
| 502 | hudson.maven.MavenModuleSet.xml identity.key.enc queue.xml.bak | |
| 503 | hudson.model.UpdateCenter.xml jenkins.model.ArtifactManagerConfiguration.xml secret.key | |
| 504 | hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml jenkins.model.DownloadSettings.xml secret.key.not-so-secret | |
| 505 | hudson.scm.CVSSCM.xml jenkins.model.JenkinsLocationConfiguration.xml secrets | |
| 506 | hudson.scm.SubversionSCM.xml jenkins.mvn.GlobalMavenConfig.xml updates | |
| 507 | hudson.tasks.Ant.xml jenkins.security.QueueItemAuthenticatorConfiguration.xml userContent | |
| 508 | hudson.tasks.Mailer.xml jobs users | |
| 509 | [root@TheLegacyServer jenkins]# ls | *.xml | |
| 510 | -bash: config.xml: command not found | |
| 511 | [root@TheLegacyServer jenkins]# ls | grep *.xml | |
| 512 | [root@TheLegacyServer jenkins]# ls *.xml | |
| 513 | config.xml hudson.tasks.Shell.xml | |
| 514 | hudson.maven.MavenModuleSet.xml hudson.triggers.SCMTrigger.xml | |
| 515 | hudson.model.UpdateCenter.xml jenkins.model.ArtifactManagerConfiguration.xml | |
| 516 | hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml jenkins.model.DownloadSettings.xml | |
| 517 | hudson.scm.CVSSCM.xml jenkins.model.JenkinsLocationConfiguration.xml | |
| 518 | hudson.scm.SubversionSCM.xml jenkins.mvn.GlobalMavenConfig.xml | |
| 519 | hudson.tasks.Ant.xml jenkins.security.QueueItemAuthenticatorConfiguration.xml | |
| 520 | hudson.tasks.Mailer.xml nodeMonitors.xml | |
| 521 | hudson.tasks.Maven.xml | |
| 522 | [root@TheLegacyServer jenkins]# cat config.xml | |
| 523 | <?xml version='1.0' encoding='UTF-8'?> | |
| 524 | <hudson> | |
| 525 | <disabledAdministrativeMonitors/> | |
| 526 | <version>1.644</version> | |
| 527 | <numExecutors>1</numExecutors> | |
| 528 | <mode>NORMAL</mode> | |
| 529 | <useSecurity>true</useSecurity> | |
| 530 | <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy"> | |
| 531 | <permission>hudson.model.Hudson.Administer:deepak</permission> | |
| 532 | <permission>hudson.model.Hudson.Read:anonymous</permission> | |
| 533 | <permission>hudson.model.Hudson.Read:saatvik</permission> | |
| 534 | <permission>hudson.model.Hudson.Read:vatsal</permission> | |
| 535 | <permission>hudson.model.Item.Build:saatvik</permission> | |
| 536 | <permission>hudson.model.Item.Build:vatsal</permission> | |
| 537 | <permission>hudson.model.Item.Cancel:saatvik</permission> | |
| 538 | <permission>hudson.model.Item.Cancel:vatsal</permission> | |
| 539 | <permission>hudson.model.Item.Configure:saatvik</permission> | |
| 540 | <permission>hudson.model.Item.Configure:vatsal</permission> | |
| 541 | <permission>hudson.model.Item.Create:saatvik</permission> | |
| 542 | <permission>hudson.model.Item.Create:vatsal</permission> | |
| 543 | <permission>hudson.model.Item.Delete:saatvik</permission> | |
| 544 | <permission>hudson.model.Item.Delete:vatsal</permission> | |
| 545 | <permission>hudson.model.Item.Discover:saatvik</permission> | |
| 546 | <permission>hudson.model.Item.Discover:vatsal</permission> | |
| 547 | <permission>hudson.model.Item.Read:anonymous</permission> | |
| 548 | <permission>hudson.model.Item.Read:saatvik</permission> | |
| 549 | <permission>hudson.model.Item.Read:vatsal</permission> | |
| 550 | <permission>hudson.model.Item.Workspace:saatvik</permission> | |
| 551 | <permission>hudson.model.Item.Workspace:vatsal</permission> | |
| 552 | <permission>hudson.model.View.Read:anonymous</permission> | |
| 553 | </authorizationStrategy> | |
| 554 | <securityRealm class="hudson.security.HudsonPrivateSecurityRealm"> | |
| 555 | <disableSignup>true</disableSignup> | |
| 556 | <enableCaptcha>false</enableCaptcha> | |
| 557 | </securityRealm> | |
| 558 | <disableRememberMe>false</disableRememberMe> | |
| 559 | <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/> | |
| 560 | <workspaceDir>${JENKINS_HOME}/workspace/${ITEM_FULLNAME}</workspaceDir>
| |
| 561 | <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
| |
| 562 | <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/> | |
| 563 | <jdks/> | |
| 564 | <viewsTabBar class="hudson.views.DefaultViewsTabBar"/> | |
| 565 | <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/> | |
| 566 | <clouds/> | |
| 567 | <quietPeriod>5</quietPeriod> | |
| 568 | <scmCheckoutRetryCount>0</scmCheckoutRetryCount> | |
| 569 | <views> | |
| 570 | <hudson.model.AllView> | |
| 571 | <owner class="hudson" reference="../../.."/> | |
| 572 | <name>All</name> | |
| 573 | <filterExecutors>false</filterExecutors> | |
| 574 | <filterQueue>false</filterQueue> | |
| 575 | <properties class="hudson.model.View$PropertyList"/> | |
| 576 | </hudson.model.AllView> | |
| 577 | </views> | |
| 578 | <primaryView>All</primaryView> | |
| 579 | <slaveAgentPort>0</slaveAgentPort> | |
| 580 | <label></label> | |
| 581 | <nodeProperties/> | |
| 582 | <globalNodeProperties/> | |
| 583 | </hudson>[root@TheLegacyServer jenkins]# cd /var/www | |
| 584 | [root@TheLegacyServer www]# ls | |
| 585 | cgi-bin html | |
| 586 | [root@TheLegacyServer www]# cd html | |
| 587 | [root@TheLegacyServer html]# ls | |
| 588 | [root@TheLegacyServer html]# cd ../cgi-bin | |
| 589 | [root@TheLegacyServer cgi-bin]# ls | |
| 590 | [root@TheLegacyServer cgi-bin]# ls -l | |
| 591 | total 0 | |
| 592 | [root@TheLegacyServer cgi-bin]# ls -l | |
| 593 | total 0 | |
| 594 | [root@TheLegacyServer cgi-bin]# ls -la | |
| 595 | total 8 | |
| 596 | drwxr-xr-x 2 root root 4096 Nov 19 22:43 . | |
| 597 | drwxr-xr-x 4 root root 4096 Jan 16 17:44 .. | |
| 598 | [root@TheLegacyServer cgi-bin]# cd ../html | |
| 599 | [root@TheLegacyServer html]# ls -la | |
| 600 | total 8 | |
| 601 | drwxr-xr-x 2 root root 4096 Nov 19 22:43 . | |
| 602 | drwxr-xr-x 4 root root 4096 Jan 16 17:44 .. | |
| 603 | [root@TheLegacyServer html]# cd ../. | |
| 604 | [root@TheLegacyServer www]# cd .. | |
| 605 | [root@TheLegacyServer var]# . | |
| 606 | -bash: .: filename argument required | |
| 607 | .: usage: . filename [arguments] | |
| 608 | [root@TheLegacyServer var]# cd | |
| 609 | [root@TheLegacyServer ~]# cd /var/lib/jenkins | |
| 610 | [root@TheLegacyServer jenkins]# ls | |
| 611 | config.xml hudson.tasks.Maven.xml nodeMonitors.xml | |
| 612 | Download metadata.log hudson.tasks.Shell.xml nodes | |
| 613 | Fingerprint cleanup.log hudson.triggers.SCMTrigger.xml plugins | |
| 614 | hudson.maven.MavenModuleSet.xml identity.key.enc queue.xml.bak | |
| 615 | hudson.model.UpdateCenter.xml jenkins.model.ArtifactManagerConfiguration.xml secret.key | |
| 616 | hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml jenkins.model.DownloadSettings.xml secret.key.not-so-secret | |
| 617 | hudson.scm.CVSSCM.xml jenkins.model.JenkinsLocationConfiguration.xml secrets | |
| 618 | hudson.scm.SubversionSCM.xml jenkins.mvn.GlobalMavenConfig.xml updates | |
| 619 | hudson.tasks.Ant.xml jenkins.security.QueueItemAuthenticatorConfiguration.xml userContent | |
| 620 | hudson.tasks.Mailer.xml jobs users | |
| 621 | [root@TheLegacyServer jenkins]# nano /etc/httpd/conf.d/reverse-proxy.conf | |
| 622 | [root@TheLegacyServer jenkins]# setsebool -P httpd_can_network_connect true | |
| 623 | setsebool: SELinux is disabled. | |
| 624 | [root@TheLegacyServer jenkins]# service apache restart | |
| 625 | Redirecting to /bin/systemctl restart apache.service | |
| 626 | Failed to restart apache.service: Unit apache.service failed to load: No such file or directory. | |
| 627 | [root@TheLegacyServer jenkins]# service httpd restart | |
| 628 | Redirecting to /bin/systemctl restart httpd.service | |
| 629 | [root@TheLegacyServer jenkins]# |