If you want to use the Gold web GUI, you will need to configure your Httpd server to use SSL. For RedHat Linux systems, a good guide on this is "Buiding a Secure RedHat Apache Server HOWTO" at <http://www.faqs.org/docs/Linux-HOWTO/SSL-RedHat-HOWTO.html>.
The following shows an example configuration that involves making some modifications to the httpd configuration to support the use of cgi-bin and SSL connections as well as the creation of a private key and a self-signed certificate.
Edit the httpd.conf file under /etc/httpd/conf:
[root]# cd /etc/httpd/conf
[root]# cp httpd.conf httpd.conf.orig
vi httpd.conf
Edit your cgi-bin Directory to agree with the cgi-bin directory you configured Gold to use and ensure it has the following properties:
<Directory "/var/www/cgi-bin"> Options ExecCGI AddHandler cgi-script .cgi .pl </Directory>
Add a virtual host definition and edit as appropriate for your environment:
<VirtualHost 192.168.72.24:443> DocumentRoot /var/www/cgi-bin/gold ServerName gold-server.whatever.org ServerAdmin Your.Email@whatever.org ErrorLog logs/gold-error_log TransferLog logs/gold-access_log SSLEngine on SSLCertificateFile /etc/httpd/conf/ssl.crt/gold-server.crt SSLCertificateKeyFile /etc/httpd/conf/ssl.key/gold-server.key SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown </VirtualHost>
![]() | As further explanation, if you are installing your cgi-bin files directly under /var/www/cgi-bin, just use /var/www/cgi-bin as your DocumentRoot. If you are installing your cgi-bin files under a subdirectory such as /var/www/cgi-bin/gold, you may want to use /var/www/cgi-bin/gold as your DocumentRoot. You could specify /var/www/cgi-bin here, but then you would need to use an extra gold subdirectory in your URL when accessing the Gold GUI from your browser. |
Create an Alias for cgi-bin pointing to your cgi-bin directory. You may need to callout your specific cgi-bin subdirectory if your web server configuration interferes with your cgi-bin alias. You may also need to comment out any conflicting ScriptAlias definition:
#ScriptAlias /cgi-bin/ "/var/www/cgi-bin/" Alias /cgi-bin/gold "/var/www/cgi-bin/gold"
Create a Private Key for Gold
[root]# mkdir ssl.key
[root]# openssl genrsa -out ssl.key/gold-server.key 1024
Create a Self-Signed Certificate
[root]# openssl req -new -key ssl.key/gold-server.key -x509 -out ssl.crt/gold-server.crt
Startup or restart httpd.
[root]# /usr/sbin/apachectl restart
![]() | In order to use the web gui, users will have to generate passwords for themselves using the gchpasswd client command. [scottmo]# gchpasswd |
To access the web gui, open a browser with url: https://$server/gold.cgi
[scottmo]# mozilla https://gold-server/gold.cgi