Apache and SSL Presented by Paul Weinstein, Waubonsie Consulting, O’Reilly Open Source Convention...

Apache and SSL

Presented by Paul Weinstein,Waubonsie Consulting,

<pdw@waubonsie.com>

O’Reilly Open Source Convention

July 24, 2002

Apache and SSL - Paul Weinstein - <pdw@waubonsie.com> - 2

Hello World

• Introduction• What Will Be Covered

o Review of SSLo Quick History of Apache and SSLo Apache 1.3.xo Apache 2.0.xo Cool Tricks of Apache and SSL

• What Won’t Be Covered

Disclaimer

It should be noted that this presentation does not cover all issues relating to securing networked based

machines and their content. This presentation is designed only to

introduce basic concepts and configuration of Apache and SSL.

SSL and TLS:

Secure Sockets Layer (SSL), developed by Netscape Communications, and Transport Layer Security (TLS), the open-standard replacement for SSL from the Internet Engineering Task

Force, are the two protocols that add encryption and authentication to

TCP/IP.

SSL and TLS:Two Main Features

• Ciphers; which enable the encryption of data between the client and server.

• Digital Certificates; which provide a method of authentication of a client and server.

SSL and TLS:Ciphers

• Symmetric (a.k.a. Secret-Key)

• Asymmetric (a.k.a. Public-Key)

SSL and TLS:Digital Certificates

• Advantage of Public-Key Encryption• Server Certificate• Client Certificate• Root Certificate

• Certificate Authorityo Public Certificate Authorityo Private Certificate Authority

Apache and SSL:A Timeline

* Platform Dependent

mod_ssl

• Support for SSL v2, v3 and TLS v1• Advance pass-phrase handling for

private keys• X.509 based digital certificates,

certificate generation, certificate revocation list

• Support for crypto acceleration hardware *

• Backward compatibility

* Source: E-Soft June 2002 Report, <http://www.securityspace.com>

mod_ssl

• Most Popular SSL Solution for Apacheo 1,098,542 of 4,577,603 or

23.99%*

• Second Only to PHP and Perl Overallo 43.71% and 24.11%*

Apache 1.3.x:mod_ssl

• Integrationo Needs EAPIo Can Build as

a DSOo OpenSSL

Toolkit

• Supports New Apache 2.0 Architecture• Included with the Apache 2.0.x source

code• To add mod_ssl when building Apache

o --enable-sslo --with-ssl=/path/to/OpenSSL/lib

Apache 2.0.x:mod_ssl

Transacting of payment information for consumer good(s) in a secure

manner between the customer and the business.

Apache and SSL:Cool Tricks - The Ubiquitous Online

• What We Need:o Enable mod_sslo Request a server certificate from

a public certificate authorityo Install server certificateo Add a CGI script to collect datao Configure access to CGI script via

• What We Get:

• What We Get:o The communication with the store is

secure. o The server on the other end,

decrypting the data is in fact the online store as identified by the server’s digital certificate and authenticated by a trusted third party.

Transacting of organizational information in a secure manner

between the organization’s groups and individuals.

Apache and SSL:Cool Tricks - An Organization’s

Intranet

• What We Need:o Create a private certificate

authority using OpenSSLo Enable mod_sslo Request a server certificate from

the private certificate authorityo Install server certificate

Intranet

• What We Need:o Add a CGI script to collect datao Configure access to CGI script via

HTTPSo Install private certificate

authority's root certificateo Configure server to authenticate

clients based on certificates from private certificate authority

Intranet

• What We Need:o Sign client certificate requests &

install in client’s web browserso Install private certificate

authority’s root certificateo Authenticate servers based on

private certificate authority

Intranet

• What We Get:

Intranet

• What We Get:oThe communication within the

organization is secure.

oThe server on one end is in fact organization’s server - the information from is valid.

oThe client on the other end is in fact a member of the organization - the information has not been compromised.

Review of Apache and SSL

• SSL and TLS• History of Apache and SSL• Apache 1.3.x• Apache 2.0.x• Cool Tricks of Apache and SSL

Citation

• Engelschall, Ralf User Manual mod_ssl Version 2.8 Jan. 2001 <http://www.modssl.org/docs/2.8>

• mod_ssl: The Apache Interface to OpenSSL <http://www.modssl.org>

Citation

• Weinstein, Paul. "Web Security: Encryption & Authentication." Daemonnews (May 2001): 15 pars. <http://www.daemonnews.org/200105/ssl_apache.html>

• Weinstein, Paul "Web Security: Apache and mod_ssl." Daemonnews (June 2001): 15 pars. <http://www.daemonnews.org/200106/ssl_apache_pt2.html>

Suggested References

• This Presentation: o Article:

•Weinstein, Paul. “Apache and SSL” O’Reilly Network: ONLamp.com (April 2002): 24 pars. <http://www.onlamp.com/pub/a/onlamp/2002/04/18/ssl.html>

Suggested References• This Presentation:

o Slides:•<http://www.waubonsie.com>•<http://www.weinstein.org/

work/presentations/oscon02/apache_ssl> (HTML)

•<http://www.weinstein.org/work/presentations/oscon00/apache_ssl.pdf> (PDF)

• Apache Project, <http://www.apache.org>

• Apache Week, <http://www.apacheweek.com>

• mod_ssl Project, <http://www.modssl.org> o Mailing Lists, List Archives:

•<modssl-announce@modssl.org>

•<modssl-users@modssl.org> o<http://

marc.theaimsgroup.com/?l=apache-modssl>

Suggested References• OpenSSL Project, <http://www.openssl.org>

o Mailing Lists, List Archives: • <openssl-announce@openssl.org>

o <http://marc.theaimsgroup.com/?l=apache-modssl>

• <openssl-cvs@openssl.org> o <http://www.progressive-comp.com/

Lists/?l=openssl-cvs> • <openssl-dev@openssl.org>

o <http://www.progressive-comp.com/Lists/?l=openssl-dev>

• <openssl-users@openssl.org> o

<http://www.progressive-comp.com/Lists/?l=openssl-users>

Apache and SSL Presented by Paul Weinstein, Waubonsie Consulting, O’Reilly Open Source Convention...

Documents

O’Reilly Auto Parts - LoopNet

The Open Source Paradigm Shift Tim O’Reilly O’Reilly & Associates, Inc. June 2003

NIKOLAS WEINSTEIN GLASS Weinstein... · 2020. 12. 18. · Since 1991, Nikolas Weinstein has been exploring a sustained interest in creating large-scale glass Artworks that lie at

Waubonsie Valley Boys Soccer Off Season Workoutswvhs.ipsd.org/uploads/Athletics/SummerCamp/BSoc... · Waubonsie Valley Boys Soccer Off Season Workouts Overview The demands of the

Weinstein special election ruling

Introduction - Waubonsie Valley High School

Computer Security Fundamentals - 123seminarsonly.com€¦ · Computer Security Fundamentals Paul Weinstein Waubonsie Consulting November 15, 2002. 2 Introduction

Homenaje a Luis Weinstein

Weinstein- salud y autogestión

Andrew Weinstein Presentation

Ali A. Weinstein, PhD

Weinstein Coating Flows

s3. · Web viewHussain Rizvi DNS Bartlett 11 Tyreke Jackson SCR Aurora (Waubonsie Va... 11 Matt Waldron DNS Aurora (Waubonsie Va... 12 Patrick Galloway DNS Aurora (West Aurora) 12

Accessing O’Reilly for Higher Education · 2020-06-24 · Accessing O’Reilly for Higher Education O’Reilly for Higher Education offers a platform that includes technology and

Weinstein Suit

Waubonsie Valley Orchesis

Weinstein Company AFM 2012

THE JEREMY D. WEINSTEIN · tlnittd ~tatt.s ~matt Mr. Jeremy D. Weinstein WASHINGTON, DC 20510-0504 http:.'/feinstein.senate.gov September 28, 2016 Law Offices of Jeremy D. Weinstein

Waubonsie State Park Orientation Panel · Title: Waubonsie State Park_Orientation Panel Created Date: 5/20/2016 12:11:04 PM

Richard Weinstein Photography