Hi,

I believe that Sergei (Thank you for your work!) follows a standard for the
apache installed on FreeBSD.
Remember that FreeBSD puts everything in /usr/local when it comes to
packets and applications not part of the base system. :)

When I installed the server I did set a custom path on the file system (
/data/www ) and then copied the files from the package to the relevant
subdirectories.
James if you want I can send you a copy of my apache config file.

/Martin

On 21 Feb 2024 at 22.55.03, Oliver Welter <[email protected]> wrote:

> Hi,
>
> I have no clue on FreeBSD and the ports are provided by a third party so
> I have no idea what the basis is for this packaging (Sergei was one of
> the co-founders of this project but is no longer involved in the
> development today but continues to run the ports repo - thanks for this
> ;) ).
>
> The "official" setup with Linux uses a lot of rewriting magic to point
> URLs to "other" places in the filesystem to make things like URL based
> realm selection work. You might want to check the apache config from the
> config repo directly:
>
> https://github.com/openxpki/openxpki-config/blob/community/contrib/apache2-openxpki-site.conf
>
> regards
>
> Oliver
>
> On 21.02.24 21:34, James B. Byrne via OpenXPKI-users wrote:
>
> On Wed, February 21, 2024 13:10, Oliver Welter wrote:
>
> > Hi James,
>
> >
>
> > the package should install default.html - just make a copy or a symlink
>
> > to index.html and you should be good to go.
>
> >
>
> I found an index.html file in /usr/local/www/openxpki/htdocs.  This file
> has
>
> the same contents as
> /usr/local/share/examples/openxpki/htdocs/default.html,
>
> which I presume is the default.html file that you wrote of.  However, I
> cannot
>
> find any reference in the documentation that this file should be in
>
> /usr/local/www/openxpki/ as well as or instead of ./htdocs/.  So, I am
>
> concerned that I have misconfigured something and that the Apache
> configuration
>
> file root directory should be pointing at /usr/local/www/openxpki/htdocs/.
>
>
> Installing default.html as index.html in /usr/local/www/openxpki/ removes
> the
>
> Forbidden warning and the logged error.  However, now what is see instead
> is:
>
>
>   OpenXPKI is loading...
>
>
> And in the access log I see this:
>
>
> 192.168.216.89 - - [21/Feb/2024:14:24:14 -0500] "OPTIONS * HTTP/1.0" 200 -
> "-"
>
> "Apache/2.4.58 (FreeBSD) OpenSSL/1.1.1t-freebsd
>
> mod_fastcgi/mod_fastcgi-SNAP-0910052141 (internal dummy connection)"
>
>
> Top reveals this:
>
>
> 77740 openxpki      1  20    0   229M   189M nanslp   0   4:55   0.12% perl
>
>
>
>
> This is the relevant excerpt from my Apache configuration file:
>
>
> . . .
>
> Define __HOST_IPV4      '192.168.216.89'
>
> Define __HTTP_ROOT      '/usr/local/www'
>
> Define __PREFIX_PATH    '/usr/local'
>
> . . .
>
> Listen ${__HOST_IPV4}:443
>
> <VirtualHost ${__HOST_IPV4}:443>
>
>    ServerName        openxpki.hamilton.harte-lyne.ca
>
>    ServerAlias       *
>
>    ServerAdmin       [email protected]
>
>    DocumentRoot      ${__HTTP_ROOT}
>
> . . .
>
>
> There is no /usr/lib//cgi-bin/ on FreeBSD-13.2.  This is all I can find:
>
>
> find /usr/local/ -type d -name cgi-bin
>
> /usr/local/www/openxpki/cgi-bin
>
> /usr/local/www/apache24/cgi-bin
>
> /usr/local/libexec/cups/cgi-bin
>
> /usr/local/share/examples/openxpki/cgi-bin
>
>
> The contents of the last are:
>
>
> ll /usr/local/www/openxpki/cgi-bin/
>
> total 69
>
> -rwxr-xr-x  1 root  wheel   4690 Jan  8 08:05 download.fcgi
>
> -rwxr-xr-x  1 root  wheel   3677 Jan  8 08:05 est.fcgi
>
> -rwxr-xr-x  1 root  wheel   2248 Jan  8 08:05 healthcheck.fcgi
>
> -rwxr-xr-x  1 root  wheel  28770 Jan  8 08:05 rpc.fcgi
>
> -rwxr-xr-x  1 root  wheel   7378 Jan  8 08:05 scep.fcgi
>
> -rwxr-xr-x  1 root  wheel   6339 Jan  8 08:05 scepv3.fcgi
>
> -rwxr-xr-x  1 root  wheel    750 Jan  8 08:05 soap.fcgi
>
> -rwxr-xr-x  1 root  wheel  10717 Jan  8 08:05 webui.fcgi
>
>
>
>
> As far as ScriptAlias directives I see this in my localized configuration:
>
>
> :g/ScriptAlias/
>
>    66     ScriptAlias /scep ${__HTTP_ROOT}/openxpki/cgi-bin/scepv3.fcgi$
>
>    81     ScriptAlias /healthcheck
> ${__HTTP_ROOT}/openxpki/healthcheck.fcgi$
>
>   151     ScriptAlias /rpc  ${__HTTP_ROOT}/openxpki/cgi-bin/rpc.fcgi$
>
>   154     ScriptAlias /healthcheck
>
> ${__HTTP_ROOT}/openxpki/cgi-bin/healthcheck.fcgi$
>
>   157     ScriptAlias /certep  ${__HTTP_ROOT}/openxpki/cgi-bin/certep.fcgi$
>
>   160     ScriptAlias /.well-known/est
>  ${__HTTP_ROOT}/openxpki/cgi-bin/est.fcgi$
>
>   163     ScriptAlias /cmc  ${__HTTP_ROOT}/openxpki/cgi-bin/cmc.fcgi$
>
>   165     ScriptAliasMatch ^/(([a-z0-9-]+)/)?cgi-bin/webui.fcgi
>
> ${__HTTP_ROOT}/openxpki/cgi-bin/webui.fcgi$
>
>
>
> And these in the provided example configuration:
>
>
> :g/ScriptAlias/
>
>    28     ScriptAlias /scep /usr/lib/cgi-bin/scepv3.fcgi$
>
>    43     ScriptAlias /healthcheck /usr/lib/cgi-bin/healthcheck.fcgi$
>
>    81     ScriptAlias /rpc  /usr/lib/cgi-bin/rpc.fcgi$
>
>    84     ScriptAlias /healthcheck /usr/lib/cgi-bin/healthcheck.fcgi$
>
>    87     ScriptAlias /certep  /usr/lib/cgi-bin/certep.fcgi$
>
>    90     ScriptAlias /.well-known/est  /usr/lib/cgi-bin/est.fcgi$
>
>    93     ScriptAlias /cmc  /usr/lib/cgi-bin/cmc.fcgi$
>
>    95     ScriptAliasMatch ^/(([a-z0-9-]+)/)?cgi-bin/webui.fcgi
>
> /usr/lib/cgi-bin/webui.fcgi$
>
>
> The Directory directives in my localized configuration are:
>
>
> <Directory "${__HTTP_ROOT}/openxpki/cgi-bin/">
>
>      AllowOverride None
>
>      Options +ExecCGI
>
>      Order allow,deny
>
>      Allow from all
>
>      Require all granted
>
> </Directory>
>
>
> <Directory ${__HTTP_ROOT}/>
>
> #    Options FollowSymLinks
>
> #    AllowOverride FileInfo
>
>      Require all granted
>
> </Directory>
>
>
> Thank you for the help.
>
>
> --
> Protect your environment -  close windows and adopt a penguin!
>
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users
>
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to