From owner-freebsd-questions@FreeBSD.ORG Fri Jan 2 10:09:21 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED00816A4CE for ; Fri, 2 Jan 2004 10:09:20 -0800 (PST) Received: from agoron.net (mail.agoron.net [206.181.233.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0164143D53 for ; Fri, 2 Jan 2004 10:09:19 -0800 (PST) (envelope-from marius@agoron.net) Received: (qmail 10075 invoked by uid 85); 2 Jan 2004 18:09:21 -0000 Received: from marius@agoron.net by mail.agoron.net by uid 89 with qmail-scanner-1.16 (clamscan: 0.54. spamassassin: 2.55. Clear:. Processed in 0.309543 secs); 02 Jan 2004 18:09:21 -0000 Received: from unknown (HELO MK) (206.181.233.90) by agoron.net with SMTP; 2 Jan 2004 18:09:21 -0000 From: "Marius Kirschner" To: "'Matthew Seaman'" Date: Fri, 2 Jan 2004 13:09:17 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 In-Reply-To: <20040102172012.GA31343@happy-idiot-talk.infracaninophile.co.uk> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-Index: AcPRVLy1hjhHTJ6mQGSP0R3vBK7WHAABk60w X-Qmail-Scanner-Message-ID: <107306696152610069@mail.agoron.net> Message-Id: <20040102180919.0164143D53@mx1.FreeBSD.org> cc: 'FreeBSD Questions' Subject: RE: Changing Apache X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Jan 2004 18:09:21 -0000 Thanks, Matthew, much appreciated. I assume I'll be able to use my current httpd.conf file, but just rename it to httpsd.conf? Also, if I get a certificate for www.whatever.com will I be able to refer to it via http:// and https://? ---Marius > -----Original Message----- > From: Matthew Seaman [mailto:m.seaman@infracaninophile.co.uk] > Sent: Friday, January 02, 2004 12:20 PM > To: Marius Kirschner > Cc: 'FreeBSD Questions' > Subject: Re: Changing Apache > > On Fri, Jan 02, 2004 at 11:10:56AM -0500, Marius Kirschner wrote: > > I currently have Apache 1.3.29 running and want to switch to the > > Apache mod-ssl version. My question is, do I need to deinstall the > > standard apache before building the mod-ssl one from the > ports? And > > what would be the best procedure to minimize the downtime? > Thank you, > > Yes, you should de-install apache13 before installing apache13-modssl. > Although it's called mod_ssl, it is actually rather more than > just a dynamically loadable module -- the main apache httpd > binary gets patched to provide the 'EAPI' programming interface. > > Best way to minimize downtime is to > > a) build apache13-modssl on a scratch box and test your > configuration there. Practice installing everything. Once > you're pretty certain it's going to work smoothly, and you > understand how to install certificates and so forth, then: > > b) build apache13-modssl -- if you do this on the server it will > cause the port dependencies to be installed automatically > (basically that's just the devel/mm port) > > c) Stop the apache13 server and pkg_deinstall it. > > d) Install the pre-built apache13-modssl port > > e) Apply your local customizations to your httpd.conf, install web > content etc. > > d) Start the apache13-modssl server: remember it's "apachectl > startssl" to have SSL enabled. > > If you don't want to build the httpd on the server machine, > then build what packages you need off-line. Installation > procedure will be much the same as above. If you have any > other 3rd party apache loadable modules (mod_php4, mod_perl > etc.) these will need to be recompiled against the new > apache13-modssl server at stage (d) above. At some point > running through a round or two of 'pkgdb -Fvu' to sort out > package dependencies is a good idea. You can also put: > > APACHE_PORT= www/apache13-modssl > > into /etc/make.conf to make sure that all apache-related > ports you install subsequently will have the correct dependencies. > > Cheers, > > Matthew > > -- > Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks > Savill Way > PGP: http://www.infracaninophile.co.uk/pgpkey Marlow > Tel: +44 1628 476614 Bucks., > SL7 1TH UK >