The current version of the HP Apache-based Web Server (also
referred to herein as HP Apache) for HP-UX is 1.3.26.00 and the
Product Number is B9415AA.
Designed to run out-of-the-box, the HP Apache-based Web Server
for HP-UX ensures strong 128-bit security and high performance for
a web site that is reliable and easy to manage. This 64-bit product
combines popular Open Source components including software developed
by the Apache Software Foundation (http://www.apache.org/), the Tomcat Java Servlet Engine, PHP, and Webmin administrative
tool. The HP Apache-based Web Server is also enhanced with HP-developed
features, such as performance tuning, migration and user guides,
Chroot capability and security modules.
Summary
of Change |
 |
Many changes have occurred since the initial release of HP-UX
11i v1.5, when the HP Apache-based Web Server v.1.3.12 was available
as a 32-bit product. Since that time, updates have been posted on
the HP Software Depot (http://www.software.hp.com) website.
This version of the HP Apache is principally a security-fix,
bug-fix, and upgrade release. Apache 1.3.26 addresses and fixes
the issue regarding a remotely exploitable vulnerability in handling
of large data chunks as noted in the following security bulletins:
HP Security Bulletin: #0197 (http://itrc.hp.com/)
CAN-2002-0392 (http://cve.mitre.org/)
CERT CA-2002-17 (http://www.cert.org/advisories/CA-2002-17.html)
|
| |
|
 | IMPORTANT: All users are urged to upgrade to this release
immediately. |
|
| |
|
The HP Apache is now a 64-bit binary instead of 32-bit, the
versions of some components have been upgraded and new features
were introduced. New features include:
The mod_jk connector
module for Tomcat
C++ shared library support
Webmin administration and
configuration GUI
Automatic restart of Apache/Tomcat/Webmin
Enhanced product documentation
Details
of Change |
|
HP Apache-based
Web Server v.1.3.26.00 for the Itanium Processor Family (IPF) platform.
RSA BSAFE Crypto C Library
v.5.2.1 has U.S. Commerce approval for worldwide export of 128-bit
strong encryption.
OpenSSL v.0.9.6c is a toolkit
implementing the Secure Sockets Layer (SSL v2/v3) and Transport
Layer Security (TLS v1) protocols as well as a full-strength general purpose
cryptography library.
The mod_ssl v.2.8.9
module is dynamically included and provides strong cryptography
using the OpenSSL toolkit and BSAFE Crypto C libraries.
Tomcat v.3.3.1 is the servlet
container used for the reference implementation for Java Servlets
2.2 and JavaServer Pages 1.1 specifications.
Apache JServ v.1.1.1 servlet engine is compliant
with Java Servlets 2.0 and requires the Java Servlet Development
Kit (JSDK) 2.0, which you can download from:
http://java.sun.com/products/servlet/archive.html
The mod_jserv module
is dynamically included and used by both Tomcat and JServ to communicate
with the HP Apache-based Web Server.
The new mod_jk connector module
is recommended over mod_jserv for Apache to Tomcat
communication. The mod_jk connector can either
use the original ajpv12 protocol or the newer ajpv13 protocol.
PHP v.4.2.1 is a popular,
server-side, cross-platform, HTML-embedded, full-featured language
with a Java/C++ syntax. It also supports many databases.
The mod_perl v. 1.25 module is statically included and supports 64-bit
version of Perl v.5.6.1.
Webmin v.0.980 is a web-based
administration and configuration tool from Webmin that has been
enhanced for the HP Apache-based Web Server.
Support for loading C++ shared
libraries.
Chroot causes a user-specified
directory to become the root directory, the starting point for path
searches. A malicious user cannot get to the root file system. Our chroot
includes SSL enhancements, such as pass phrase exiting in 60 seconds
and retry limits.
Memory Management (MM) is
a 2-layer abstraction library, which simplifies the usage of shared
memory between forked (and this way strongly related) processes under
Unix platforms.
Apache/Tomcat/Webmin can
now be automatically restarted on reboot. More information on customizing
and configuring this feature can be found in the configuration notes.
Impact |
|
Size Requirements:
65 - 75MB of disk space is recommended for installing HP Apache.
Bundle Requirements:
The mod_perl module
is pre-enabled in this release and depends on a 64-bit Perl version
5.6.1 that is included in this Operating Environment and is installed
in /opt/perl_64/bin/perl.
Webmin depends on Perl 5
or later and is not specific to either 32 or 64-bit versions. Webmin
expects Perl to be installed in /opt/perl/bin/perl. Refer to the Webmin Notes located in the /opt/apache/hp_apache_docs directory for more information.
Tomcat and JServ depend on
the IPF version of Java 1.3 that is included in this Operating Environment.
Building DSOs using apxs
(Apache Extension Tool) depends on Perl which is included in the
HP-UX 11i v1.6 Operating Environment. The expected location for
Perl is /opt/perl/bin/perl. Either use this Perl, or change the path in the apxs
script to the Perl location installed on your machine.
Perl and Java details are
contained in release notes and can be found after installing the
product in /opt/apache/hp_apache_docs/ or http://yourserver.com/hp_apache_docs/.
Installing over previous versions:
Before updating, make sure to stop your previous HP Apache
binary by executing: /opt/apache/bin/apachectl stop
Otherwise, the previous binary will continue running which
prevents the new binary from starting.
By default, swinstall does not reinstall filesets if the same revision already
exists on your system. If you want to reinstall the same revision
(for example, if some files are lost), you can change the installation
options by choosing Options/Change Option.
Installing a product or a
fileset may automatically install dependent filesets necessary to
run the selected items.
If an HP or non-HP version
of Apache is already on the system, swinstall preserves the existing configuration files under /opt/apache/conf, /opt/apache/conf/jserv, and /opt/tomcat/conf by renaming [file] to [file].save.. It also preserves certificates and certificate-related
files under /opt/apache/conf/ssl directories by renaming [file] to [file].save.. In this way, you do not lose previous configuration
information. However, the original configuration file ([file].save) is over-written if you re-install Apache.
Upon successful installation,
swinstall runs HP Apache automatically.
Compatibility |
|
Modules that were not distributed with HP Apache and user-developed
modules for the previous 32-bit version do not work with this 64-bit
release. These modules must be recompiled as a 64-bit binary to
work with this release.
Performance |
|
There is no impact to the performance of this product compared
to the version that was released in HP-UX 11i v1.5.
Obsolescence |
|
This is the last supported version of HP Apache-based Web
Server v1.3.26.x in HP-UX 11i v1.6. No further versions of HP Apache-based
Web Server v.1.3.x will be distributed unless a critical fix is
required. Users should begin upgrading to HP Apache-based Web Server
v.2.0 for HP-UX 11i v1.6, which is available for download from Software
Depot at:
http://www.software.hp.com/
Compared to previous versions, HP Apache-based Web Server
v.2.0 offers better performance, and new IPv6, WebDAV and LDAP support
which provides a more robust web server for your HP-UX 11i environment.
For more information on HP Apache-based Web Server v.2.0,
please visit our web site at:
http://www.hp.com/go/webserver
Printable version
