HP-UX 11i June 2002 Release Notes

HP-UX 11i Operating Environment Applications
HP-UX 11i Operating Environment
Chapter 6
93
This version of the HP Apache-based Web Server includes 128-bit strong encryption.
Apache SSL connections use a default dummy certificate provided by HP. See the release
notes for the PEM pass phrase associated with the certificate.
NOTE You must obtain certificates from authorized agencies for commercial purposes and
make the necessary changes in httpd.conf to use the desired certificates.
updated for
March 2002
The following new feature is included in version 1.3.19.23:
• With this release, the chroot feature of the HP Apache-based Web Server has been
enhanced. Customers who are currently using chroot (or are planning to use it in
the future) are strongly encouraged to upgrade to this release. Current chroot users
should recreate their chroot environment by running
/opt/apache/bin/chroot_os_cp.sh, making sure to back up their original chroot
environment beforehand.
updated for
December 2001
The following new features are included in version 1.3.19.21:
• Fix for the Automatic restart on reboot
• Certmig utility re-built on PA1.1
• Fix for support of C++ shared modules.
updated for
September 2001
The following new features are included in version 1.3.19.20:
• mod_perl now supports Perl version 5.6.1 (included in the OE).
• Apache/Tomcat/Webmin can now be automatically restarted on reboot. More
information on customizing and configuring this feature can be found at
/opt/apache/htdocs/doc/config.notes.
• The security module mod_ssl updated to v.2.8.3.
• Tomcat now starts with a nohup command, so that even if the parent shell is
terminated, Tomcat will not die. The output from Tomcat startup is kept in
/opt/tomcat/logs/tomcat_startup.log.
• Chroot now causes the named directory to become the root directory, the starting
point for path searches. A malicious user cannot get to the root file system. The HP
Apache-based Web Server’s chroot includes SSL enhancements. Under the chroot
directory, there is a script for copying OS files.
• Now included is Memory Management (MM), a 2-layer abstraction library that
simplifies the usage of shared memory between forked processes under UNIX
platforms. MM support allows the use of httpd.conf SSLSessionCashe directives
shm:/opt/apache/logs/ssl_scache(512000).
• certmig now makes possible the sharing of certificates between the iPlanet Web
Server 4.x and any server that supports PKCS#12 formats. The certmig utility is an
extension of the pk12util utility, provided by the Mozilla community. In addition to
the pk12util functionality, certmig lists and extracts certificates from iPlanet
certificate databases.