Apache Configuration

This topic describes how to configure SSL when the Apache HTTP Server 2.4 (httpd-2.4.29-Win64-VC15) web service is installed on the Webspace Server.

If IIS is installed, the World Wide Web Publishing service must be stopped and disabled before downloading and installing Apache. After you install Apache, you want to verify that you can connect without encryption. Then, you can enable HTTPS and update your certificate.

Stop the WWW Publishing Service

To stop the service:

  1. From Services, right-click World Wide Web Publishing service and select Properties.
  2. From the Properties dialog box, select Disabled and from the Startup type drop-down menu and click the Stop button.
  3. Click OK to continue.

After the service is stopped, you can now install the Apache HTTP Server.

Install the Apache

  1. Go to http://www.apachelounge.com/download/ and download the latest version. The version tested with Webspace was httpd-2.4.29-Win64-VC15.zip.
  2. Download and install C++ Redistributable Visual Studio 2017. The version tested with Webspace can be downloaded from the following link: https://aka.ms/vs/15/release/VC_redist.x64.exe
  3. Extract httpd-2.4.29-Win64-VC15.zip onto the Webspace Server machine into the C:\Apache24 directory.
  4. On the Start menu, point to All Programs, Accessories, and then Command Prompt. Right-click Command Prompt and Run as administrator.
  5. In the Command Prompt window, type the following:
     cd C:\Apache24\bin
     httpd -k install
     httpd -k start 

Verify that Ports are Open and Connection Can Be Made

After you install the server, you may need to open port 80 in the firewall if it is not already open. If SSL is running, verify that port 443 is open using the following steps:

  1. Open c:\Apache24\bin and run ApacheMonitor.exe. From the system tray, open the Apache Monitor and verify that the service has started.
  2. Open c:\Apache24\htdocs and create a directory called webspace.
  3. Copy the contents of c:\Program files\Proficy\Proficy Webspace\Web into c:\Apache24\htdocs\goglobal directory.
  4. Open a browser on the Webspace Server and go to try to login to start a session.

Enable the HTTPS Connection for Strong Encryption

To enable HTTPS connection:

  1. Load the ssl module for Apache by uncommenting the line "Module ssl_module modules/mod_ssl.so" in the C:\Apache24\conf\httpd.conf file.
  2. Include the httpd-ssl.conf file by uncommenting the line "Include conf/extra/httpd-ssl.conf" in the C:\Apache24\conf\httpd.conf file.
  3. Update the server certificate, server key, and the folder path for root certificate in the C:\Apache24\conf\extra\httpd-ssl.conf file by either giving a relative path if the certificates are in Apache24 folder, or an absolute path, and uncomment the following lines:
    SSLCertificateFile "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/Proficy_WSServer.crt"
    SSLCertificateKeyFile "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/Proficy_WSServer.key"
    SSLCACertificatePath "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/"
    If you get an error related to shmcb session cache, comment out the line referring to the session cache by putting a # sign at he beginning of the line, like this:
    #SSLSessionCache "shmcb:${SRVROOT}/logs/ssl_scache(512000)"

Update the Certificates

To complete the chain of trust, import the root certificate on the client node from where you are going to launch the browser to connect to Webspace.