Data protection

Apache HTTP Server

3min
this document provides information about configuring the {{k3}} with apache http server by using pkcs #11 libraries for additional questions related to your {{k3}} device, see the relevant user guide about apache http server apache http server, typically referred to as apache , is a free and open source cross platform web server software originally released in 1995, it is one of the oldest and most reliable web server software on the internet, running 67% of all web servers worldwide an open community of developers develops and maintains apache under the auspices of the apache software foundation what is a web server? the purpose of a web server is to serve websites on the internet it accomplishes this by using the http protocol the primary job of all web servers is to accept requests from clients (such as a visitor's web browser) and then send the response to that request (for example, the components of the page that the visitor wants to see) using hsms to protect apache private keys apache can work with private keys stored on hardware security modules (hsms), which helps to prevent key disclosure and man in the middle attacks for secure communication through the https protocol, apache uses the openssl library openssl does not support pkcs #11 natively to use hsms, you have to install the openssl pkcs11 package on centos or the libengine pkcs11 openssl package on ubuntu these packages provide access to pkcs #11 modules through the engine interface you can use a pkcs #11 uri instead of a regular file name to specify a server key and a certificate in the configuration file for the appropriate website integration overview to integrate {{k3}} with apache, you must perform the following tasks install {{futurex}} pkcs #11 configure {{k3}} edit the {{futurex}} pkcs #11 configuration file install and configure the openssl engine configure apache http server the following sections describe how to perform these tasks