Contents

---

Preface

1 - Introduction

What is the Covalent Fast Start Server?

Components of the Covalent Fast Start Server

Covalent Fast Start Server Features

Apache 1.3.20 HTTP Server

Covalent SSL Module

Important files and commands

Covalent Apache configuration

Covalent SSL 1.5.4

Comanche 3.0

Tomcat 3.2

2 - Installing Covalent Fast Start Server

Installation Requirements

Downloading and Unpacking

Installing the Covalent Fast Start Server

3 - Starting Your Covalent Fast Start Server

Starting the Covalent Fast Start Server

Stopping the Covalent Fast Start Server

Restart and Other Commands

About the Start-up Script

4 - Testing the Covalent Fast Start Server Modules

Mod Perl Examples

Examples of Mod Perl as a CGI Replacement

Examples of Mod Perl as Apache Perl Module Development Environment

Extra Examples

PHP 4 Examples

Hello World Example

The phpinfo() Example

Forms and Querystrings Example

Java Servlet API Examples

JavaServer Pages Examples

On-line Documentation

Security Issues with the Examples

Adding New Users to the HTTP Password File

Removing Password Security From the Examples

5 - Overview of the Comanche Server Management Tool

Using Comanche to Configure and Manage Covalent Fast Start Server

6 - Understanding SSL Security Features

Encryption

Symmetric-key Cryptography

Public-key Cryptography

Covalent SSL and Encryption

Ciphers and Cipher Suites

Tamper Detection

Authentication

Digital Certificate

Certificate Authorities (CAs)

Covalent SSL, Server Certificates, and Certificate Authorities

7 - Managing Your Keys And Server Certificates

The Covalent SSL Certificate and Key Management Tool

Overview of Options

Starting the Covalent SSL Certificate and Key Management Tool

Generating and Testing a Private Key and Server Certificate

Obtaining a Signed Server Certificate From a Certificate Authority (CA)

Generating and Submitting a Certificate Signing Request

Installing and Testing a CA-signed Server Certificate

Renewing a CA-signed Server Certificate

Self-Signing a Server Certificate

Additional Private Key Management Tools

Eliminating the Pass Phrase at Server Start-up

Changing Your Pass Phrase

Additional Instructions for Intermediate and Chain Certificates

Using a VeriSign 128-bit Secure Site (Global) ID

Using an Entrust, Inc Server Certificate

Preserving Your Private Key and Authenticated Server Certificates

8 - Obtaining Your Free Certificate Signing From Entrust, Inc

9 - Advanced SSL topics

Enabling SSL for Virtual Hosts

Improving Performance With Hardware Acceleration

Using nCipher's nFast device

Using Rainbow Technologies' CryptoSwift device

10 - Configuring Tomcat 3.2 to Work With Covalent Fast Start Server

What is Tomcat?

Tomcat Modes

What is MOD_JK?

Tomcat Directory Structure

Tomcat Configuration Files

Configuring Apache to Use MOD_JK

Auto Configuration

Manual Configuration

Assigning URLs to Tomcat

Sample httpsd.conf Modifications

Configuring Tomcat

Configuring Tomcat to use the Ajpv13 Protocol

Defining Workers

Definitions

11 - Covalent Fast Start Server Configuration File

Configuring the Covalent Fast Start Server

httpsd.conf

Global Environment Directives

Main Server Configuration Directives

Virtual Host Directives

Support for mod_perl

Support for mod_php4 and PHP 4.0

Support for mod_jk and Jakarta-Tomcat 3.2

Covalent SSL Support

12 - Covalent SSL Configuration Directive Reference

General directives

SSLPassPhraseDialog

SSLMutex

SSLRandomSeed

SSLEngine

SSLProtocol

SSLProxyProtocol

SSLLog

SSLLogLevell

SSL Caching Directives

SSLSessionCache

SSLSessionCacheTimeout

Site Authentication Directives

SSLCertificateFile

SSLCertificateKeyFile

SSLCertificateChainFile

Client Authentication Directives

SSLCACertificatePath

SSLCACertificateFile

SSLCARevocationPath

SSLCARevocationFile

SSLVerifyClient

SSLVerifyDepth

Proxy and Remote Server Authentication Directives

SSLProxyMachineCertificatePath

SSLProxyMachineCertificateFile

SSLProxyVerify

SSLProxyVerifyDepth

SSLProxyCACertificateFile

Encryption Directives

SSLCipherSuite

SSLProxyCipherSuite

Access Control Directives

SSLOptions

SSLRequireSSL

SSLRequire

Environment variables

Custom Log Formats

13 - Sources of On-line Information

Covalent Technologies, Inc

Covalent Fast Start Server

Covalent SSL

Covalent FAQ and Knowledge Base

Apache

Comanche

DAV Module

Mod_perl Module

PHP4 Module

JavaServer Pages And Servlets

Apache JServ Module

Jakarta Tomcat Module

Sun Java Technologies

Sun Solaris Systems

Certificate Authorities

Encryption and Security

14 - Troubleshooting