Web Server Setup

If you want to use the Gold web GUI, you will need to configure your Httpd server to use SSL. For RedHat Linux systems, a good guide on this is "Buiding a Secure RedHat Apache Server HOWTO" at <http://www.faqs.org/docs/Linux-HOWTO/SSL-RedHat-HOWTO.html>.

The following shows an example configuration that involves making some modifications to the httpd configuration to support the use of cgi-bin and SSL connections as well as the creation of a private key and a self-signed certificate.

Edit the httpd.conf file under /etc/httpd/conf:

[root]# cd /etc/httpd/conf

[root]# cp httpd.conf httpd.conf.orig

[root]# vi httpd.conf

Edit your cgi-bin Directory to agree with the cgi-bin directory you configured Gold to use and ensure it has the following properties:

<Directory "/var/www/cgi-bin">
  Options ExecCGI
  AddHandler cgi-script .cgi .pl
</Directory>

Add a virtual host definition and edit as appropriate for your environment:

<VirtualHost 192.168.72.24:443>
  DocumentRoot /var/www/cgi-bin/gold
  ServerName gold-server.whatever.org
  ServerAdmin Your.Email@whatever.org
  ErrorLog logs/gold-error_log
  TransferLog logs/gold-access_log
  SSLEngine on
  SSLCertificateFile /etc/httpd/conf/ssl.crt/gold-server.crt
  SSLCertificateKeyFile /etc/httpd/conf/ssl.key/gold-server.key
  SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

If you are installing your cgi-bin files directly under /var/www/cgi-bin, use /var/www/cgi-bin as your DocumentRoot. If you are installing your cgi-bin files under a subdirectory such as /var/www/cgi-bin/gold, you may want to use /var/www/cgi-bin/gold as your DocumentRoot. You could specify /var/www/cgi-bin here, but then you'll need to use an extra gold subdirectory in your URL when accessing the Gold GUI from your browser.

Create an Alias for cgi-bin pointing to your cgi-bin directory. You may need to callout your specific cgi-bin subdirectory if your web server configuration interferes with your cgi-bin alias. You may also need to comment out any conflicting ScriptAlias definition:

#ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
Alias /cgi-bin/gold "/var/www/cgi-bin/gold"

Create a Private Key for Gold

[root]# mkdir ssl.key
[root]# openssl genrsa -out ssl.key/gold-server.key 1024

Create a Self-Signed Certificate

[root]# openssl req -new -key ssl.key/gold-server.key -x509 -out ssl.crt/gold-server.crt

Startup or restart httpd.

[root]# /usr/sbin/apachectl restart

In order to use the web GUI, users will have to generate passwords for themselves using the gchpasswd client command. [scottmo]# gchpasswd

To access the web GUI, open a browser with url: https://$server/gold.cgi

[scottmo]# mozilla https://gold-server/gold.cgi