Changes between Version 1 and Version 2 of idpiam2018


Ignore:
Timestamp:
Sep 3, 2018, 7:18:31 AM (6 years ago)
Author:
admin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

    idpiam2018

    v1 v2  
    193193
    194194 *
    195    {{{
     195{{{
    196196   add-apt-repository ppa:certbot/certbot
    197197}}}
    198198 *
    199    {{{
     199{{{
    200200   apt install python-certbot-apache
    201201}}}
    202202 *
    203    {{{
     203{{{
    204204   certbot --apache -d idp.YOUR-DOMAIN
    205205}}}
    … …  
    25625613. (OPTIONAL) If you haven't follow the letsencrypt method Create a Certificate and a Key self-signed for HTTPS
    257257 *
    258    {{{
     258{{{
    259259   mkdir /root/certificates
    260260}}}
    261261 *
    262    {{{
     262{{{
    263263   openssl req -x509 -newkey rsa:4096 -keyout /root/certificates/idp-key-server.key -out /root/certificates/idp-cert-server.crt -nodes -days 1095
    264264}}}
    … …  
    266266   
    267267 *
    268    {{{
     268{{{
    269269   mv /location-to-crts/idp-cert-server.crt /root/certificates
    270270}}}
    271271 *
    272    {{{
     272{{{
    273273   mv /location-to-crts/idp-key-server.key /root/certificates
    274274}}}
    275275 *
    276    {{{
     276{{{
    277277   mv /location-to-crts/PublicCA.crt /root/certificates
    278278}}}
    … …  
    281281   
    282282 *
    283    {{{
     283{{{
    284284   chmod 400 /root/certificates/idp-key-server.key
    285285}}}
    286286 *
    287    {{{
     287{{{
    288288   chmod 644 /root/certificates/idp-cert-server.crt
    289289}}}
    290290 *
    291    {{{
     291{{{
    292292   chmod 644 /root/certificates/PublicCA.crt
    293293}}}
    … …  
    295295   Create the file `/etc/apache2/sites-available/idp-ssl.conf` as follows:
    296296
    297    {{{
     297{{{
    298298   <IfModule mod_ssl.c>
    299299      SSLStaplingCache        shmcb:/var/run/ocsp(128000)
    … …  
    331331   Enable '''proxy_http''', '''SSL''' and '''headers''' Apache2 modules:
    332332 *
    333    {{{
     333{{{
    334334   a2enmod proxy_http ssl headers alias include negotiation
    335335}}}
    336336 *
    337    {{{
     337{{{
    338338   a2ensite idp-ssl.conf
    339339}}}
    340340 *
    341    {{{
     341{{{
    342342   service apache2 restart
    343343}}}
    … …  
    345345   Configure Apache2 to redirect all on HTTPS:
    346346 *
    347    {{{
     347{{{
    348348   vim /etc/apache2/sites-enabled/000-default.conf
    349349}}}
    … …  
    36136114. Modify `server.xml`:
    362362 *
    363    {{{
     363{{{
    364364   vim /etc/tomcat8/server.xml
    365365}}}