Hack The Sec-Leading Resource Of Linux Tutorial: Apache

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="entry-title" style="background-color: white; box-sizing: border-box; color: #111111; font-family: Roboto, sans-serif; line-height: 50px; margin: 0px 0px 7px; word-wrap: break-word;">
<span style="font-size: x-large;"><u>Apache HTTP Secure Server Configuration</u></span></h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggHeyVUmoNeKIkBBwjp6w9tE0OlnEU9f5FNLy8noHKQ_s_cTyi8PsSLWCjaXbwr5gRYARjr8QQcccb5nDTV_-shq7uTRIrCVhm0AGvXtczAiAoj0T49-tGF57qEVLm9IsoxVlXU5R3YBJl/s1600/SSL.png" /></a></div>
<div>
<span style="font-size: x-large;"><u><br /></u></span></div>
<div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Securing the <a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache</a> server is one of the most important tasks of the webmaster. In this example, we will show you in this Apache HTTP Secure Server Configuration tutorial  how to use <a href="http://www.hackthesec.co.in/search/label/SSL%20Encryption" target="_blank">ssl keys</a> with your Apache web server on your installed <a href="http://www.hackthesec.co.in/search/label/centos7" target="_blank">Centos7 </a>system. this method should also work on all Fedora or Redhat based  systems</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJzRTWvnXAQ0ZRfHxBuYgWRSlZYVURR8-Q7QJe6NnTmJyzbQWAV_0Tz7FYQ5QLj0-iETPuFhujh1IjAqm609EMcAXvGis8ycbsk-11Kv-Ed6tIbmZov1RSsRjtQWEgr1OSLnBJHKYJmiAv/s1600/system_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394; font-size: large;"><u><br />Create Certificates</u></span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #222222; font-size: 15px; font-weight: normal;">Change to the following directory:</span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server /]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> cd /etc/pki/tls/certs</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #222222; font-size: 15px; font-weight: normal;">Run the following command to make server key file:</span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> make server.key</span></span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOd36DQttWjBm_ZM0hG34p4qGUhern7Q7wsDOxzymyXT9YAfXqnwWVlMVeqfhNR0WtxvouwiRdau8tqo_2MKQXp7WNmnbeTptl5R4d46yOOlgPznU2FN_0pywuA1ymTOw0pAdXZqMkpvsY/s1600/creating_server_key_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<span style="color: #222222; font-size: 15px;">Remove passphrase from private key:</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Writing RSA key</span></u></strong></div>
<div>
<span style="box-sizing: border-box;"></span><br />
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="box-sizing: border-box;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px; white-space: pre;"> openssl rsa -in server.key -out server.key
Enter pass phrase for server.key:
writing RSA key</span></span></span></pre>
<span style="box-sizing: border-box;">
</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><span style="color: #0b5394;"><u>Generate CSR key file</u></span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;"><u><strong style="box-sizing: border-box; font-size: 15px;"></strong></u></span></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">[root@server certs]#</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;"> </span><span style="background-color: transparent; line-height: 15.6px;"><span style="color: white; font-family: "courier new" , "courier" , monospace;">make server.csr</span></span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEir6BCHFyKHm4fOYHQpAhoFzlt15I4yI9e59EcSQr0HggCzuu1QcqNPmjcr7qrqj_CorIvFKXuMOaSZ0NH8bZQUmJsfkSNoX5JvUjS4pnYsIvt07kLkBBgRLY8t7Gf8CAws7uxAi605iokU/s1600/generate_csr_file_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Sign the key and make Expiration days:</span></u></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><u><span style="color: #0b5394;"><strong style="box-sizing: border-box; font-size: 15px;"></strong></span></u></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 1000
Signature ok
subject=/C=US/ST=AL/L=OLI/O=Hackthesec/OU=Hackthesec Tutorial/CN=server.hackthesec.co.in/emailAddress=info@hackthesec.co.in
Getting Private key
[root@server certs]#</span></span>
</pre>
<div>
<strong style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px;"><u><span style="color: #0b5394;">Configure SSL keys with Apache </span></u></strong><br />
<strong style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px;"></strong><br />
<div style="-webkit-text-stroke-width: 0px; color: black; font-family: 'Times New Roman'; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background-attachment: scroll; background-color: #3c3c3c; background-image: none; background-position: 0px 0px; background-repeat: repeat; border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: black; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: left; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# yum -y install httpd mod_ssl</span></span>
</pre>
</div>
<div>
<span style="background-color: white; box-sizing: border-box; line-height: 15.6px; white-space: pre;">
</span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><u><span style="color: #0b5394;">Enable  en Start  apache</span></u></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"></strong></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace; font-size: large;"><span style="line-height: 15.6px;">[root@server certs]# systemctl start httpd.service
[root@server certs]# systemctl enable httpd.service</span></span></pre>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaF_VliP7YXsKU9BtdT6xWsUhATC1FrREY7WQLVAEBFGbooXXIDR0l1BNAAJD51j3uS8bJVnfAHIvQvP4_JsNH_h6WC8grUAKsmJsXgpp_-J1Mp5FLHLwuIKm6BpOOnxNoiLbyWkPfqY2K/s1600/httpd_checking_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><strong style="box-sizing: border-box;"><br /></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; font-size: 15px;"><strong style="box-sizing: border-box;"><span style="color: #0b5394;">Configure  ‘/etc/httpd/conf.d/ssl.conf’</span></strong></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">Your ssl.conf should be like this:</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">mv /etc/httpd/conf.d/ssl.conf  /etc/httpd/conf.d/ssl.conf.orig

</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">vi /etc/httpd/conf.d/ssl.conf</span></span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;">[root@server certs]# vi /etc/httpd/conf.d/ssl.conf
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout 300
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
<VirtualHost *:443>
DocumentRoot "/var/www/html"
ServerName 127.0.0.1:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/pki/tls/certs/server.crt
SSLCertificateKeyFile /etc/pki/tls/certs/server.key
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANADOe3-VFafS2jkR3xnIpqlCnAM2kqqTcmvxvuyNqronPLqqIWg80q8d90vEbABRZEfssSM_1yfDnEoDVGX_JQL7ACbKRM-TQeCVIUpuKyVlYxeWUk36WpltCJYBKHeq5ZobDupEI-0S/s1600/ssl_setup_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Save  and exit</div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;">Restart Apache  </span></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><span style="color: #0b5394;"><strong style="box-sizing: border-box; font-size: 15px;"></strong></span></strong></div>
<div style="background-color: white; box-sizing: border-box; color: #222222; font-family: Verdana, Geneva, sans-serif; font-size: 15px; line-height: 26px; margin-bottom: 26px;">
Check if  the ports 80 and  443 are listening:</div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"> </span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">netstat -tulpen | grep :80</span></span></pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;">
</span><span style="line-height: 15.6px;"><span style="font-size: large;"> </span></span></span><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">netstat -tulpen | grep :443</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD8TEbDobkGb93B9nWhlOLZ4EBMgAL8kBOEh2soQ0i7GCT22EQtP53bm4sCcYF-xSSz1n8VT5Phb6Gl3lc7T9zh2D-M23cIaKLWPZ7W6CbOmfHHg2S9Zlhr49uZDYxK3NVrRRttG5PgxOj/s1600/checking_the_server_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;"><br />Allow the ports 80 and 443 via Iptables:</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">vi /etc/sysconfig/iptables
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">If you are using  Firewalld  please  do :</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">firewall-cmd --permanent --add-port=80/tcp
</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">firewall-cmd --permanent --add-port=443/tcp</span></span></span></pre>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">And restart or reload the firewalls :</span></strong></strong></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"></strong></strong></div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-size: large;"><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;">service iptables restart
Or 
</span></span><span style="color: white; font-family: "courier new" , "courier" , monospace; line-height: 15.6px;">[root@server certs]# </span></span><span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="line-height: 15.6px;"><span style="font-size: large;">firewall-cmd --reload</span></span><span style="font-size: 15px; line-height: 15.6px;">
</span></span></pre>
<div>
<span style="color: white; font-family: "courier new" , "courier" , monospace;"><span style="font-size: 15px; line-height: 15.6px;"><br /></span></span></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><span style="font-weight: normal;">Open the browser and Check  </span><strong style="box-sizing: border-box;">https://server.hackthesec.co.in</strong></strong></strong></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOmx0xnX6B5fYo-_twuJiDNuyk15sAnp0frIxx-gxdF57ggbCnpv4_dR3K4U95wGlB3B6H4I-c_pW46l-ryCnwwnhdWKWA2QwW-IxYuCNXge3qvpdfn2ITFcPbSg7caNML0i3Df_yAxZgN/s1600/untrusted_option_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px;">
<strong style="box-sizing: border-box;"><strong style="box-sizing: border-box; color: #222222; font-size: 15px;"><strong style="box-sizing: border-box;"><br />Certificate View</strong></strong></strong></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjNEUc61mVEi0DtyqECjspIrvaNH23vzqWFMKthHhfuyOO7knJG4UqjOmPOMIkkXK85SZra-QDAjGFpyMyPuO_idvu2ycfy3mUfxhuBCFnjfXV1CZyo_QVMWIffVm28PWAzBRONgLu9lV5/s1600/certificate_view_www.hackthesec.co.in.png" /></a></div>
<div style="background-color: white; box-sizing: border-box; font-family: Verdana, Geneva, sans-serif; line-height: 26px; margin-bottom: 26px; text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>

Apache HTTP Secure Server Configuration for CentOS 7

Apache HTTP Secure Server Configuration Securing the Apache server is one of the most important tasks of the webmaster. In this ex...