{"id":2856,"date":"2016-10-12T07:38:43","date_gmt":"2016-10-12T12:38:43","guid":{"rendered":"http:\/\/itsoftware.com.co\/content\/?p=2856"},"modified":"2019-05-18T12:08:04","modified_gmt":"2019-05-18T17:08:04","slug":"puerto-https-adicional-apache","status":"publish","type":"post","link":"https:\/\/itsoftware.com.co\/content\/puerto-https-adicional-apache\/","title":{"rendered":"Puerto https adicional al tradicional 443 en Apache sobre Linux"},"content":{"rendered":"
Este procedimiento detalla c\u00f3mo poner un puerto https adicional en Apache (sobre Linux), considerando que originalmente estamos usando el puerto 443 para este fin, y queremos usar el puerto 4443 apuntando a otro directorio root, con el mismo certificado ssl.<\/div>\n
<\/div>\n
\u00a0\"Puerto<\/div>\n
\n

Certificado SSL<\/p>\n<\/div>\n

<\/p>\n

<\/div>\n
\n
1) Se crea la carpeta root del nuevo puerto https adicional. Por ejemplo \/var\/www2, y se le dan los premisos de acceso<\/b><\/div>\n
\u00a0 \u00a0 \u00a0mkdir \/var\/www2<\/i><\/div>\n
\u00a0 \u00a0 \u00a0chown -R ubuntu:ubuntu \/var\/www2<\/i><\/div>\n
\u00a0 \u00a0 \u00a0chmod -R 777 \/var\/www2<\/i><\/div>\n
<\/div>\n
2) Se agrega el puerto el puerto https adicional \/etc\/apaches\/ports.conf, por ejemplo el puerto 4443<\/b><\/div>\n
<\/div>\n
Listen 80<\/i><\/div>\n
Listen 443<\/i><\/div>\n
Listen 4443<\/i><\/u><\/div>\n
\u00a0<\/i><\/div>\n
<IfModule ssl_module><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Listen 443<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Listen 4443<\/u><\/i><\/div>\n
<\/IfModule><\/i><\/div>\n
\u00a0<\/i><\/div>\n
<IfModule mod_gnutls.c><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Listen 443<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Listen 4443<\/u><\/i><\/div>\n
<\/IfModule><\/i><\/div>\n
<\/div>\n
3) En\u00a0\/etc\/apache2\/sites-enabled\/000-default.conf se agrega el virtual host al puerto https adicional, con el nuevo root<\/b><\/div>\n
<\/div>\n
<VirtualHost *:4443><\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 ServerName dominio.com.co<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 ServerAdmin webmaster@localhost<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 DocumentRoot \/var\/www2\/<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 ErrorLog ${APACHE_LOG_DIR}\/error_sms.log<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 CustomLog ${APACHE_LOG_DIR}\/access_sms.log combined<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 #SSL configuration:<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 SSLEngine on<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 SSLCertificateKeyFile \/etc\/ssl\/ssl.key\/dominio_com_co.key<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 SSLCertificateFile \/etc\/ssl\/ssl.crt\/www_dominio_com_co.crt<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 SSLCertificateChainFile \/etc\/ssl\/ssl.crt\/www_dominio_com_co.ca-bundle<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0\u00a0<\/i><\/div>\n
<\/VirtualHost><\/i><\/div>\n
<\/div>\n
4) En el archivo\u00a0\/etc\/apache2\/sites-available\/default-ssl.conf<\/b><\/div>\n
<\/div>\n
Dentro de \u00a0<IfModule mod_ssl.c><\/i> se agrega el default para el nuevo puerto<\/div>\n
<\/div>\n
\u00a0<VirtualHost _default_:4443><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 ServerAdmin webmaster@localhost<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 DocumentRoot \/var\/www2<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 ErrorLog ${APACHE_LOG_DIR}\/error.log<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 CustomLog ${APACHE_LOG_DIR}\/access.log combined<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 SSLEngine on<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 SSLCertificateFile\u00a0 \u00a0 \u00a0 \/etc\/ssl\/certs\/ssl-cert-snakeoil.pem<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 SSLCertificateKeyFile \/etc\/ssl\/private\/ssl-cert-snakeoil.key<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <FilesMatch \u00ab\\.(cgi|shtml|phtml|php)$\u00bb><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 SSLOptions +StdEnvVars<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <\/FilesMatch><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <Directory \/usr\/lib\/cgi-bin><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 SSLOptions +StdEnvVars<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <\/Directory><\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 BrowserMatch \u00abMSIE [2-6]\u00bb \\<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 nokeepalive ssl-unclean-shutdown \\<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 downgrade-1.0 force-response-1.0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 # MSIE 7 and newer should be able to use keepalive<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 BrowserMatch \u00abMSIE [17-9]\u00bb ssl-unclean-shutdown<\/i><\/div>\n
\u00a0<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 <\/VirtualHost><\/i><\/div>\n
<\/div>\n
5) Se agrega en\u00a0\/etc\/apache2\/apache2.conf\u00a0 los permisos para la carpeta nueva<\/strong><\/div>\n
<\/div>\n
<Directory \/var\/www2\/><\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Options Indexes FollowSymLinks<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 AllowOverride All<\/i><\/div>\n
\u00a0 \u00a0 \u00a0 \u00a0 Require all granted<\/i><\/div>\n
<\/Directory><\/i><\/div>\n
<\/div>\n<\/div>\n
6) En el firewall del servidor se debe dar acceso al puerto 4443 (iptables, firewall de Windows o Security Group de Amazon EC2)<\/strong><\/div>\n
<\/div>\n
7) El nuevo puerto se llama desde el navegador con\u00a0https:\/\/dominio.com.co:4443<\/a>\u00a0<\/strong><\/div>\n
<\/div>\n
Para verificar si el puerto est\u00e1 debidamente abierto, debe mostrarse este comando:<\/div>\n
<\/div>\n
\n
\n
# ss\u00a0-lnt<\/code><\/div>\n
<\/div>\n
LISTEN\u00a0 \u00a0 \u00a00\u00a0 \u00a0 \u00a0 128\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0:::4443\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0:::*<\/div>\n<\/div>\n<\/div>\n
<\/div>\n
Esto puede ser \u00fatil cuando no queremos que ciertos procesos sean vistos desde el puerto https de producci\u00f3n, o se estos procesos se est\u00e1n afectando por reglas de direccionamiento del sitio principal.<\/div>\n
<\/div>\n
Este es un servicio de divulgaci\u00f3n de conocimiento de ITSoftware SAS<\/a>.<\/div>\n","protected":false},"excerpt":{"rendered":"

Este procedimiento detalla c\u00f3mo poner un puerto https adicional en Apache (sobre Linux), considerando que originalmente estamos usando el puerto 443 para este fin, y queremos usar el puerto 4443[…]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[257,6],"tags":[909,913,908,911,910,907,912],"class_list":["post-2856","post","type-post","status-publish","format-standard","hentry","category-lenguajes-de-programacion","category-programacion","tag-certificado-ssl","tag-certificado-ssl-sobre-apache","tag-https","tag-puerto-adicional-https","tag-puerto-adicional-ssl","tag-puerto-ssl","tag-ssl-sobre-apache"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/posts\/2856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/comments?post=2856"}],"version-history":[{"count":0,"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/posts\/2856\/revisions"}],"wp:attachment":[{"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/media?parent=2856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/categories?post=2856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/itsoftware.com.co\/content\/wp-json\/wp\/v2\/tags?post=2856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}