5.1

18 vFabric Web Server
18
Creating and Using vFabric Web
Server Instances
Option Description Required?
--sourcedir=sourcedir Name of the directory that contains the
template that newserver uses to create the
new vFabric Web Server instance.
The default value is httpdir/_instance.
No.
Table 4.2. newserver Prompts
Prompt Description
Enable SSL and create a default key [y/n]? Enabling SSL provides secure communication between client and
server by allowing mutual authentication; the use of digital signatures
for integrity; and encryption for privacy. If you answer yes, you are
later asked for information that will be used to create a certificate.
Server hostname (e.g. www.example.com) [myserver]? Name that the vFabric Web Server instance uses to identify itself. If
your host does not have a registered DNS name, enter its IP address.
The default value is the value you entered for the --server option.
Administrator email [webmaster@myserver]? Email address to which vFabric Web Server instances send problems.
This address appears on some instance-generated pages, such as
error documents.
Port for http:// traffic [80]? HTTP port to which the vFabric Web Server instance listens. Default
value is 80 when running the newserver command as the root user
on Unix, 8080 otherwise.
Port for https:// SSL traffic [443]? HTTPS port to which the vFabric Web Server instance listens. Default
value is 443 when running the newserver command as the root
user on Unix, 8443 otherwise.
Creating a sample conf/userfile, add initial users Prompts for creating a sample file that contains the list of users
and passwords for authentication. Use this file if you later need to
authenticate users who use the vFabric Web Server instance. The
prompts ask you for the username and their password; enter Return at
the username prompt when you are done.
If you previously specified that you want to enable SSL... The newserver command prompts you for information required to
create the private key, such as the size of the SSL RSA key in bits and
the PEM pass phrase you specify when you start the instance.
You also are prompted to enter information for your certificate. The
information is mostly about your Distinguished Name, or DN, that will
be incorporated into your certificate request. As indicated, some fields
have default values. You can also leave some fields blank by entering
a '.' (period.)
When newserver completes, it generates the following SSL files in
the ssl subdirectory of the instance directory:
• instancename.key: Unencrypted private key. The file has a
permission code of 0600 for additional security.
• instancename.pem: DES 3 encrypted private key.
• instancename.csr: Certificate-signing request. Submit this file to
the Certificate Authority.
• instancename.crt: Self-signed certificate. Replace this certificate
with a signed certificate by the CA.
Important Be sure to record the passphrase to decrypt the *.pem
file and back up the file. Never transmit the .key file or cause it to be
readable by others.