Cisco Headend System Release 2.5 Installation Guide

Page of 138
 
Appendix C 
SSL Configuration for the LoadPIMS Web Service 
116 
4038415 Rev A 
5  Add a new Location and Import directive within the <VirtualHost *:443> 
directive, just before the </VirtualHost> line. The changes should look like the 
following example: 
<VirtualHost *:443>
 
 
# contents omitted below
 
 
.
 
 
.
 
 
<Location />
 
            Order Deny,Allow
 
            Allow from localhost
 
            Allow from dncs
 
            Deny from all
 
            ErrorDocument 403 "<html><head><title>Error 
403</title></head><body><h2>SECURITY WARNING</h2>Web 
connections are only allowed from localhost.</body></html>"
 
     
</Location>
 
 
Include /etc/apache2/conf/*.https
 
</VirtualHost>
 
6  Test the configuration changes, before the Apache service is refreshed, by typing 
the following command and then pressing Enter
Important:  The message Syntax OK should then appear. 
/usr/apache2/bin/httpd -t
 
7  Follow these instructions to restart the Apache2 service. 
a  Type the following command and then press Enter
svcadm refresh apache2
  
b  Type the following command and then press Enter
svcadm clear apache2
  
Note:  If the Apache service is not in an error state, you will see the following 
message: 
svcadm: Instance "svc:/network/http:apache2" is not in a 
maintenance or degraded state.
 
c  Type the following command and then press Enter
svcadm enable apache2
  
8  Type the following command and then press Enter
cd  /etc/opt/certs
  
9  Type the following command  and then press Enter to create the necessary link. 
ln -s /etc/opt/certs/server.crt  cachain.crt