1. Installing the Apache HTTP Server 2.4.37.
2. Setting up the Apache HTTP Server 2.4.37.
3. Removing an earlier version of Apache HTTP Server.

Procedure

1. Shut down any running instances of the Apache HTTP Server 2.4.29.
2. Back up the Apache HTTP Server 2.4.29 installation and configuration files.
3. Install the Apache HTTP Server 2.4.37 by using the .zip installation method for the current system. For more information see Additional Resources at the end of this section.

4. Migrate your configuration from the Apache HTTP Server version 2.4.29 to version 2.4.37.

   Note

   The JBoss Core Services configuration files might have changed since the Apache HTTP Server 2.4.29 release. Update the 2.4.37 version configuration files rather than overwrite them with the configuration files from a different version, such as the Apache HTTP Server 2.4.29.

5. Remove the Apache HTTP Server 2.4.29 root directory.

Procedure

1. Open a browser and log in to the Software Downloads page on the Red Hat Customer Portal.
2. From the Product drop-down menu, select Apache HTTP Server.
3. From the Version drop-down menu, select the correct JBoss Core Services version.

4. Depending on the RHEL version that you are using, perform either of the following steps:

   1. If you are using RHEL 7, on the Releases tab, click Download next to the Red Hat JBoss Core Services Apache HTTP Server archive file that matches the platform and architecture for your system.

   2. If you are using RHEL 8, click the Security Advisories tab. Then click Download next to the Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Patch 06 for RHEL 8 x86_64 file.

      Note

      The Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Patch 06 for RHEL 8 x86_64 file is the base archive file for installing the Apache HTTP Server on RHEL 8.

5. Extract the downloaded archive file to your installation directory.

   Note

   On Red Hat Enterprise Linux systems, install the Apache HTTP Server in the /opt/ directory.

   The jbcs-httpd24-2.4/httpd directory is created when you extract the archive. This directory is the top-level directory for the Apache HTTP Server. This document refers to the jbcs-httpd24-2.4/httpd directory as HTTPD_HOME.

6. To install the latest service pack release, if any, perform the following steps:

   1. On the Software Downloads page, click the Security Advisories tab.

   2. On the Security Advisories tab, click Download next to the latest Red Hat JBoss Core Services Apache HTTP Server Patch archive file that matches the platform and architecture for your system.

      For example, if you want to install the Service Pack 10 release of the Apache HTTP Server 2.4.37 on Red Hat Enterprise Linux 7, click Download next to the Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Patch 10 for RHEL 7 x86_64 file.

      Note

      Service pack releases are cumulative. By downloading the latest service pack release, you also install any previous service pack releases automatically.

Procedure

1. On a command line, go to the HTTPD_HOME/sbin/ directory.

2. Enter the following command as the root user:

    ./apachectl start

Procedure

1. On a command line, go to the HTTPD_HOME/sbin/ directory.

2. Enter the following command as the root user:

    ./apachectl stop

Procedure

1. Stop all instances of the Apache HTTP Server:

2. Set the http listen port to higher than 1024 in

   Listen 2080
   ServerName <hostname>:2080

3. Set the https listen port to higher than 1024 in

   Listen 2443

4. Change the ownership of the
5. Change the ownership of the run

6. Verify that httpd is running under the apache user only rather than the root and apache users:

   $ ps -eo euser,egroup,comm | grep httpd

   This command produces the following type of output:

   apache   apache   httpd
   apache   apache   httpd
   apache   apache   httpd
   ...

   Important

   Limit the file permissions of the apache user . This helps to prevent the following scenarios:
   

   • Unauthorized access or modification of files and directories by website users
   • Unwanted changes to the Apache HTTP Server configuration files

Procedure

1. To determine which system daemon is running, enter the following command:

   $ ps -p 1 -o comm=

   If systemd is running, the following output is displayed:

   systemd

2. To set up the Apache HTTP Server for systemd, run the .postinstall.systemd script as the root user:

   # cd HTTPD_HOME
   # sh httpd/.postinstall.systemd

3. To control the Apache HTTP Server with systemd, you can perform any of the following steps as the root user:

   • To enable the Apache HTTP Server services to start at system startup by using systemd:

     # systemctl enable jbcs-httpd24-httpd.service

   • To start the Apache HTTP Server by using systemd:

     # systemctl start jbcs-httpd24-httpd.service

   • To stop the Apache HTTP Server by using systemd:

     # systemctl stop jbcs-httpd24-httpd.service

   • To verify the status of the Apache HTTP Server by using systemd:

     # systemctl status jbcs-httpd24-httpd.service

     Note

     Any user can run the status operation.

Procedure

1. Log in to the Red Hat Subscription Management web page.
2. Click the Systems tab.
3. Click the Name of the system that you want to add the subscription to.
4. Change from the Details tab to the Subscriptions tab, and then click Attach Subscriptions.
5. Select the check box next to the subscription that you want to attach, and then click Attach Subscriptions.

Verification

1. Log in to the Red Hat Subscriptions web page.
2. In the Subscription Name column, click the subscription that you want to select.
3. Under Products Provided, you require Red Hat JBoss Core Services.

Procedure

1. To subscribe to the Apache HTTP Server CDN repositories for your operating system version, enter the following command as the root user:

   # subscription-manager repos --enable <repository>

   Note

   If you are using Red Hat Enterprise Linux 7, replace <repository> with jb-coreservices-1-for-rhel-7-server-rpms.

   If you are using Red Hat Enterprise Linux 8, replace <repository> with jb-coreservices-1-for-rhel-8-x86_64-rpms.

2. To install the Apache HTTP Server, enter the following command as the root user:

   # yum groupinstall jbcs-httpd24

   Note

   With the release of Red Hat Enterprise Linux 8, JBCS no longer uses the yum groupinstall command. For more information about configuring HTTPD on Red Hat Enterprise Linux 8, see Deploying different types of servers: Setting up the Apache HTTP Web Server.

Procedure

1. To install httpd, enter the following command as the root user:

   $ yum install httpd

2. To install the mod_jk, mod_cluster, mod_rt, and mod_bmx modules, enter the following commands as the root user:

   $ yum install jbcs-httpd24-mod_jk-ap24
   
   $ yum install jbcs-httpd24-mod_cluster-native
   
   $ yum install jbcs-httpd24-mod_bmx
   
   $ yum install jbcs-httpd24-mod_rt

   Note

   When the Apache HTTP Server (httpd) is installed on Red Hat Enterprise Linux 8, the base operating system modules are located in the /usr/lib64/httpd/modules directory. JBCS modules such as mod_jk, mod_cluster, mod_rt, and mod_bmx are currently located in the /opt/rh/jbcs/root/usr/lib64/httpd/modules directory. These JBCS modules follow all JBCS rules for naming, directories, and prefixes.

3. To use these modules, perform either of the following steps:

   • Create or modify the configuration file to add the LoadModule command. For example:

     LoadModule jk_module /opt/rh/jbcs/root/usr/lib64/httpd/modules/mod_jk.so

   • Include the directory of the installed JBCS modules in the JBCS_HOME/httpd/conf.d directory.

Prerequisites

1. Open a browser and log in to the Software Downloads page on the Red Hat Customer Portal.
2. From the Product drop-down menu, select Apache HTTP Server.
3. From the Version drop-down menu, select the correct JBoss Core Services version.
4. On the Releases tab, click Download next to the Red Hat JBoss Core Services Apache HTTP Server archive file that matches the platform and architecture for your system.

5. Extract the downloaded archive file to your installation directory.

   Note

   On Microsoft Windows systems, install the Apache HTTP Server in the C:\Program Files directory.

   The jbcs-httpd24-2.4 directory is created when you extract the archive. This directory is the top-level directory for the Apache HTTP Server. This document refers to the jbcs-httpd24-2.4 directory as HTTPD_HOME.

6. To install the latest service pack release, perform the following steps:

   1. On the Software Downloads page, click the Security Advisories tab.

   2. On the Security Advisories tab, click Download next to the latest Red Hat JBoss Core Services Apache HTTP Server Patch archive file that matches the platform and architecture for your system.

      For example, if you want to install the Service Pack 10 release of the Apache HTTP Server 2.4.37 on Microsoft Windows, click Download next to the Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Patch 10 for Windows Server x86_64 file.

      Note

      Service pack releases are cumulative. By downloading the latest service pack release, you also install any previous service pack releases automatically.

Procedure

1. To add the http2_module to the configuration:

   1. Open the HTTP_HOME/conf.modules.d/00-base.conf file.

   2. Enter the following line:

      ...
      LoadModule http2_module modules/mod_http2.so

2. To add the h2 protocol to the configuration:

   1. Open the HTTP_HOME/conf/httpd.conf file.

   2. If you want to enable HTTP/2 support for a virtual host, add the h2 protocol to the virtual host configuration.

      Alternatively, if you want to enable HTTP/2 support for all server connections, add the h2 protocol to the main server configuration section.

      For example:

      <IfModule http2_module>
          Protocols h2 http/1.1
          ProtocolsHonorOrder on
      </IfModule>

3. To update the Secure Socket Layer (SSL) configuration:

   1. Open the HTTP_HOME/conf.d/ssl.conf file:

   2. Ensure the SSLEngine directive is set to enabled. The SSL Engine is enabled by default.

      SSLEngine on

   3. Update the SSLProtocol directive to disable the SSLv2 and SSLv3 protocols. This forces connections to use the Transport Layer Security (TLS) Protocols.

      SSLProtocol all -SSLv2 -SSLv3

   4. Update the SSLCipherSuite directive to specify which SSL ciphers can be used with the Apache HTTP Server.

      For example:

      SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK

      Note

      For more information about the SSL module and the supported directives, see Apache HTTP Server Documentation Version 2.4 - Modules: Apache Module mod_ssl.

4. To restart the Red Hat JBoss Core Services Apache HTTP Server, and apply the changed configuration, perform one of the following steps as the root user:

   • If you want to use systemd to start the Apache HTTP Server on Red Hat Enterprise Linux, enter the following command:

     # systemctl restart jbcs-httpd24-httpd.service

   • If you want to use apachectl to start Red Hat JBoss Core Services on Red Hat Enterprise Linux, enter the following command:

     # HTTP_HOME/sbin/apachectl restart

   • If you want to start the Apache HTTP Server on Windows Server, enter the following command:

     # net restart Apache2.4

Procedure

1. Access the server from a browser or by using the curl command-line tool.

2. To check the SSL/TLS request log, enter the following command:

   $ grep 'HTTP/2'  HTTP_HOME/logs/ssl_request_log

3. To check the SSL/TLS access log, enter the following command:

   $ grep 'HTTP/2'  HTTP_HOME/logs/ssl_access_log

Verification

1. If HTTP/2 is enabled, the grep 'HTTP/2' HTTP_HOME/logs/ssl_request_log command produces the following type of output:

   [26/Apr/2018:06:44:45 +0000] 172.17.0.1 TLSv1.2 AES128-SHA "HEAD /html-single/index.html HTTP/2" -

2. If HTTP/2 is enabled, the grep 'HTTP/2' HTTP_HOME/logs/ssl_access_log command produces the following type of output:

   172.17.0.1 - - [26/Apr/2018:06:44:45 +0000] "HEAD /html-single/index.html HTTP/2" 200 -

Procedure

1. To check that the HTTP/2 protocol is active, enter the following command:

   $ curl -I http://<JBCS_httpd_server>:<port>/<test.html>

   Note

   In the preceding example, replace <JBCS_httpd_server> with the URI of the server, such as example.com, and replace <test.html> with any HTML file that you want to use to test the configuration. An example HTML test page is not provided. The port number is dependent on your configuration.