Web Server Setup

If you want to use the Gold web GUI, you will need to configure your Httpd server to use SSL. For RedHat Linux systems, a good guide on this is "Buiding a Secure RedHat Apache Server HOWTO" at <http://www.faqs.org/docs/Linux-HOWTO/SSL-RedHat-HOWTO.html>.

The following shows an example configuration that involves making some modifications to the httpd configuration to support the use of cgi-bin and SSL connections as well as the creation of a private key and a self-signed certificate.

Edit the httpd.conf file under /etc/httpd/conf:

[root]# cd /etc/httpd/conf

[root]# cp httpd.conf httpd.conf.orig

vi httpd.conf

Edit your cgi-bin Directory to agree with the cgi-bin directory you configured Gold to use and ensure it has the following properties:

<Directory "/var/www/cgi-bin">
  Options ExecCGI
  AddHandler cgi-script .cgi .pl
</Directory>
        

Add a virtual host definition and edit as appropriate for your environment:

<VirtualHost 192.168.72.24:443>
  DocumentRoot /var/www/cgi-bin
  ServerName gold-server.whatever.org
  ServerAdmin Your.Email@whatever.org
  ErrorLog logs/gold-error_log
  TransferLog logs/gold-access_log
  SSLEngine on
  SSLCertificateFile /etc/httpd/conf/ssl.crt/gold-server.crt
  SSLCertificateKeyFile /etc/httpd/conf/ssl.key/gold-server.key
  SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>
        

Create an Alias for /cgi-bin pointing to your cgi-bin directory. You may also need to comment out any comparable ScriptAlias definition:

#ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
Alias /cgi-bin/ "/var/www/cgi-bin/"
        

Create a Private Key for Gold

[root]# openssl genrsa -out ssl.key/gold-server.key 1024

Create a Self-Signed Certificate

[root]# openssl req -new -key ssl.key/gold-server.key -x509 -out ssl.crt/gold-server.crt

Startup or restart httpd.

[root]# /usr/sbin/apachectl restart

In order to use the web gui, users will have to generate passwords for themselves using the gchpasswd client command. [scottmo]# gchpasswd

To access the web gui, open a browser with url: https://$server/gold.cgi

[scottmo]# mozilla https://gold-server/gold.cgi