OCS 2.3 - Which configuration file for ssl? [closed]

Question

Hi,

i'm using ubuntu 16.04 and try to use deployment. Outdated documentation told to create a new vhost for ssl in apache 2. In z-ocsinventory-server.conf I found following params, what is better to use? z-ocsinventory-server.conf or new vhost?

  #SSL apache settings
  #SSLEngine "SSL_ENABLE"
  #SSLCertificateFile "SSL_CERTIFICATE_FILE"
  #SSLCertificateKeyFile "SSL_CERTIFICATE_KEY_FILE"
  #SSLCACertificateFile "SSL_CERTIFICATE_FILE"
  #SSLCACertificatePath "SSL_CERTIFICATE_PATH"
  #SSLVerifyClient "SSL_VALIDATE_CLIENT"

thanks for suggestions

Answer 1

Hi,

1) You must enable the z-ocsinventory-server.conf configuration after setting the following parameters :

• OCS_DB_HOST
• OCS_DB_PORT
• OCS_DB_NAME
• OCS_DB_LOCAL
• OCS_DB_USER
• OCS_DB_PWD

2) For SSL, I personally use the file default-ssl.conf generated by ubuntu :

<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
                Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains;"
                ServerAdmin webmaster@localhost
                DocumentRoot /var/www/html
                <Directory /var/www/html>
                Options -Indexes
                </Directory>
                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined
                SSLEngine on
                SSLCertificateFile      /etc/path_cert_ocs/cacert.pem
                SSLCertificateKeyFile   /etc/path_cert_ocs/server.key

You can also make a virtual server if you host multiple servers on the same machine.

Regards