6.7. Setting up a Web Server

The goal of this section is to teach the reader how to configure web services on EnGarde Secure Linux. EnGarde Secure Linux supports two types of mail servers: normal and secure. Secure web servers have their content protected with encryption via SSL (Secure Sockets Layer).

By the end of this section the reader will have properly configured both a normal and a secure web server on their EnGarde Linux machine and will be in a position where they can begin to upload content via FTP (File Transfer Protocol) or SCP (Secure Copy Protocol).

6.7.1. DNS Setup

Begin by creating a new domain using the procedure outlined in the previous section, "Setting up a Forward DNS Zone". Once you have your forward zone created you need to do the following:

  1. Create a new Address record for "www.<yourdomain>", pointing www.<yourdomain> to the IP address of your EnGarde Secure Linux machine.

For example, if your domain name is engardelinux.org you would enter the following:

Figure 6-14. Web Server DNS Address Record

This tells the Internet what IP address the machine www.engardelinux.org may be found at.

6.7.2. Configure a Normal Web Server

Log into Guardian Digital WebTool, click the Services menu, choose the World Wide Web Management link, then choose the Create New Virtual Host option from the Modules menu and you'll be presented with a screen like the one in Figure 6-15.

Figure 6-15. Create a Virtual Host

Fill out the information on this page using the suggestions below:

When done, click the Create New Virtual Host button at the bottom of the screen. Guardian Digital WebTool will set up your website and you will be returned to the main Webserver Management screen. Click the Restart Apache Web Server Service button to activate your changes.

After this you are all done! If DNS is properly configured you should be able to access your website and you should receive a HTTP 403 error page until you upload content.

6.7.3. Configure a Secure Web Server

Log into Guardian Digital WebTool, click the Services menu, choose the World Wide Web Management link, then choose the Create New Virtual Host option from the Modules menu and you'll be presented with a screen like the one in Figure 6-16.

Figure 6-16. Create an SSL Virtual Host

Fill out the information on this page using the suggestions below:

When done, click the Create New Virtual Host button at the bottom of the screen. The website will be configured and you will be returned to the main Webserver Management screen.

Before you can use this new Secure Virtual Host you need to create an SSL certificate and key. From the main Virtual Host Management screen you will see a screen like the one in Figure 6-17.

Figure 6-17. Virtual Server Listing

Click the virtual server you just created, which is prefixed by https://, scroll down to the SSL Certificate Management section, and click the Create New Certificate button. You will be presented with a popup like the one in Figure 6-18.

Figure 6-18. Generate Certificate and Key

Fill out the information on this page using the suggestions below:

When done, click the Create Certificate button at the bottom of the screen then navigate back to the main Webserver Management screen. Click the Restart Apache Web Server Service button to activate your changes.

After this you are all done! If DNS is properly configured you should be able to access your website and you should receive a HTTP 403 error page until you upload content.