Apache Configuration Still Supported in Webspace Upgrades

This topic describes how to configure SSL when the Apache HTTP Server 2.4 (httpd-2.4.29-Win64-VC15) web service is installed on the Webspace Server, which was a configuration supported in earlier versions of Proficy Webspace. You can continue to use this older configuration or upgrade to the new one; Webspace now has its own web server. The newer version of Webspace (version 6.2 and greater) does not require the use of either Apache or IIS.

Note: If IIS is installed, the World Wide Web Publishing service must be stopped and disabled before downloading and installing Apache. After you install Apache, you want to verify that you can connect without encryption. Then, you can enable HTTPS and update your certificate.

Stop the WWW Publishing Service

To stop the service:

  1. From Services, right-click World Wide Web Publishing service and select Properties.
  2. From the Properties dialog box, select Disabled and from the Startup type drop-down menu and click the Stop button.
  3. Click OK to continue.

After the service is stopped, you can now install the Apache HTTP Server.

Install the Apache

  1. Go to http://www.apachelounge.com/download/ and download the latest version. The version tested with Webspace was httpd-2.4.29-Win64-VC15.zip.
  2. Download and install C++ Redistributable Visual Studio 2017. The version tested with Webspace can be downloaded from the following link: https://aka.ms/vs/15/release/VC_redist.x64.exe
  3. Extract httpd-2.4.29-Win64-VC15.zip onto the Webspace Server machine into the C:\Apache24 directory.
  4. On the Start menu, point to All Programs, Accessories, and then Command Prompt. Right-click Command Prompt and Run as administrator.
  5. In the Command Prompt window, type the following:
     cd C:\Apache24\bin
 httpd -k install
 httpd -k start

Verify that Ports are Open and Connection Can Be Made

After you install the server, you may need to open port 80 in the firewall if it is not already open. If SSL is running, verify that port 443 is open using the following steps:

  1. Open c:\Apache24\bin and run ApacheMonitor.exe. From the system tray, open the Apache Monitor and verify that the service has started.
  2. Open c:\Apache24\htdocs and create a directory called proficywebspace.
  3. Copy the contents of c:\Program files\Proficy\Proficy Webspace\Web into c:\Apache24\htdocs\proficywebspace directory.
  4. Open a browser on the Webspace Server and go to try to login to start a session.

Enable the HTTPS Connection for Strong Encryption

To enable HTTPS connection:

  1. Load the ssl module for Apache by uncommenting the line "Module ssl_module modules/mod_ssl.so" in the C:\Apache24\conf\httpd.conf file.
  2. Include the httpd-ssl.conf file by uncommenting the line "Include conf/extra/httpd-ssl.conf" in the C:\Apache24\conf\httpd.conf file.
  3. Update the server certificate, server key, and the folder path for root certificate in the C:\Apache24\conf\extra\httpd-ssl.conf file by either giving a relative path if the certificates are in Apache24 folder, or an absolute path, and uncomment the following lines:
    SSLCertificateFile "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/Proficy_WSServer.crt"
SSLCertificateKeyFile "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/Proficy_WSServer.key"
SSLCACertificatePath "C:/Program Files/Proficy/Proficy Webspace/Programs/ProficyWSCerts/pki/"
    If you get an error related to shmcb session cache, comment out the line referring to the session cache by putting a # sign at he beginning of the line, like this:
    #SSLSessionCache "shmcb:${SRVROOT}/logs/ssl_scache(512000)"

Update the Certificates

To complete the chain of trust, import the root certificate on the client node from where you are going to launch the browser to connect to Webspace.