Apache HTTP Server/mod gnutls

From ArchWiki
< Apache HTTP Server
Revision as of 07:13, 29 November 2014 by MichaelRpdx (talk | contribs) (Updates to reflect AUR upgrade to v0.6. eg, replace 404 web links with current...)
Jump to navigation Jump to search

From mod_gnutls is an extension for ​Apache's httpd uses the ​GnuTLS library to provide HTTPS.:

It is similar to ​mod_ssl in purpose, but it supports some features and protocols that mod_ssl does not, and it does not use ​OpenSSL.

Installation

Install package

Install mod_gnutlsAUR, available in the Arch User Repository.

Configure Apache

  • Add these lines to /etc/httpd/conf/httpd.conf:
LoadModule gnutls_module modules/mod_gnutls.so
Include conf/extra/httpd-gnutls.conf
  • Make sure that the following line is commented in /etc/httpd/conf/httpd.conf:
Include conf/extra/httpd-ssl.conf
  • Make sure no vhost definitions include mod_ssl
  • Create the file /etc/httpd/conf/extra/httpd-gnutls.conf with the following content:
/etc/httpd/conf/extra/httpd-gnutls.conf
Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

GnuTLSCache dbm "/var/run/httpd/gnutls_scache"
GnuTLSCacheTimeout 600

<VirtualHost _default_:443>

DocumentRoot "/srv/http"
ServerName www.example.org
ServerAdmin youremail@example.org
ErrorLog "/var/log/httpd/error_log"
TransferLog "/var/log/httpd/access_log"

GnuTLSEnable on
GnuTLSPriorities NORMAL

GNUTLSExportCertificates on

GnuTLSCertificateFile /path/to/certificate/domain.tld.crt
GnuTLSKeyFile /path/to/certificate/domain.tld.key

</VirtualHost>
  • Check that Apache loaded correctly and answers on port 443.

Additional documentation of configuration directives is on the outoforder.cc mod_gnutls documentation page.

Additional Resources

You can test or verify your https configuration via SSL Labs analyze tool.

Known issues

None known as of November 2014