SmartPDU-Unuse/Xianglinghui/03.lib/appweb-doc/samples/secure-server

Secure Server Sample

This sample shows how to configure a secure Appweb server. This configuration uses:

• SSL for encryption of traffic
• Redirection of all traffic over SSL
• Chroot
• Login authentication
• Sandbox resource limits
• Blowfish encryption for the password

This sample uses a self-signed certificate. In your application, you will need a real certificate.

Notes: The password database is kept in a flat file called auth.conf. The password was created via:

authpass --cipher blowfish --password pass5 --file auth.conf example.com ralph

Requirements

• Appweb

To build:

Run:

make

This will precompile the ESP pages and a create device node inside the chroot jail for /dev/urandom.

To run:

make run

The server listens on port 8080 for HTTP traffice and 4443 for SSL. Browse to:

 http://localhost:8080/

This will redirect to SSL (you will get a warning due to the self-signed certificate). Continue and you will be prompted to login. The test username/password is ralph/pass5.

Code:

• Makefile - Makefile build instructions
• server.c - Main program
• appweb.conf - Appweb server configuration file
• web - Web content to serve
• cache - Directory for cached ESP pages

Documentation:

• Appweb Documentation
• Chroot Directive
• Configuration Directives
• Sandbox Limits
• Security Considerations
• SSL in Appweb
• User Authentication

See Also:

• esp-login - ESP form-login
• min-server - Minimal server configuration
• secure-server - Secure server configuration
• simple-server - Simple one-line embedding API
• ssl-server - SSL server
• typical-server - Typical server configuration