Page Comparison

The following modules are required to configure the reverse proxy:

• mod_proxy.so
  This module deals with proxying in Apache.

• mod_proxy_http.so
This module handles connections with both the HTTP and HTTPS protocols.

1. Navigate to the etc/apache2 directory and use the following command to enable the above modules:

   Code Block
   cd /etc/apache2 a2enmod proxy_http

2. Configure the proxy.conf file that is in the /etc/apache2/mods-available directory by including the configurations given below to the end of the file.

   Code Block

   ServerName localhost ProxyRequests off ProxyPreserveHost off <Proxy *> Order deny,allow #Deny from all Allow from all </Proxy> ProxyPass /ENROLLMENTSERVER/PolicyEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/certificatepolicy/xcep ProxyPassReverse /ENROLLMENTSERVER/PolicyEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/certificatepolicy/xcep ProxyPass /ENROLLMENTSERVER/DeviceEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/deviceenrolment/wstep ProxyPassReverse /ENROLLMENTSERVER/DeviceEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/deviceenrolment/wstep ProxyPass /Syncml/initialquery http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/syncml/devicemanagement/request ProxyPassReverse /Syncml/initialquery http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/syncml/devicemanagement/request   ProxyPass /ENROLLMENTSERVER/Win10DeviceEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/deviceenrolment/enrollment ProxyPassReverse /ENROLLMENTSERVER/Win10DeviceEnrollmentWebservice.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/deviceenrolment/enrollment ProxyPass /devicemgt http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/management/devicemgt/pending-operations ProxyPassReverse /devicemgt http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/management/devicemgt/pending-operations   ProxyPass /windows-web-agent http://server-ip>:<server-port>/windows-web-agent ProxyPassReverse /windows-web-agent http://server-ip>:<server-port>/windows-web-agent

   Info
   The default <server-ip>:<server-port> is localhost:9443.

Follow the steps given below to enable the Rewrite engine when running on Ubuntu:

1. Invoke the rewrite rules:
   
   1. Create a .htaccess file in the /var/www/ directory with the specific rewrite rules.

   2. Enable the mod_rewrite module.

      Code Block
      sudo a2enmod rewrite

2. Configure the 000-default file, which is in the /etc/apache2/sites-enabled directory.

   Info
   This step is required to replicate the configuration changes required in the Apache versions on a few files.In the older Apache versions, all virtual host directory directives were managed in the apache2.conf file, which is in the /etc/apache2 directory. In the Apache 2.4.7 version this has changed and the alterations are handled within the /etc/apache2/sites-enabled directory.

   1. Configure the value assigned to AllowOveride from None to All under <Directory/>.

      Code Block
      AllowOverride All

   2. Configure the content under <Directory /var/www/>.

      Info
      If the 000-default file does not contain the Directory tag you need to add it to the file as shown below:

      Code Block
      <Directory /var/www/> Options Indexes FollowSymLinks MultiViews AllowOverride all Order allow,deny allow from all </Directory>

3. Restart the Apache server.

   Code Block
   server.sudo service apache2 restart

RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(GET)$
RewriteRule /EnrollmentServer/Discovery.svc   http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/discovery/get [P,L]

RewriteCond %{REQUEST_METHOD} ^(POST)$
RewriteRule /EnrollmentServer/Discovery.svc http://<server-ip>:<server-port>/api/device-mgt/windows/v1.0/services/discovery/post [P,L]

Follow the steps given below to configure SSL for Apache2:

1. Enable the SSL Module.

   Code Block
   sudo a2enmod ssl

2. Create a subdirectory named ssl within the Apache server configuration hierarchy to place the certificate files.

   Code Block
   sudo mkdir /etc/apache2/ssl

   Note
   The WSO2 IoTS certificate must be generated from a trusted authority.

   Info
   Once you have the WSO2 IoT certificate and key available, configure the Apache server to use these files in a virtual host file. For more information, see how to set up Apache virtual hosts.

3. Configure the default-ssl.conf file, which is in the /etc/apache2/sites-enabled directory contains the default SSL configurations.

   Code Block
   SSLEngine on SSLCertificateFile /etc/apache2/ssl/<COMAPNY_CERTIFICATE> SSLCertificateKeyFile /etc/apache2/ssl/<COMPANY_PUBLIC_KEY> SSLCACertificateFile /etc/apache2/ssl/<COMPANY_ROOT_CERTIFICATE>

   Example:

   Code Block
   SSLEngine on SSLCertificateFile /etc/apache2/ssl/star_wso2_com.crt SSLCertificateKeyFile /etc/apache2/ssl/star_wso2_com.key SSLCACertificateFile /etc/apache2/ssl/DigiCertCA.crt

4. Enable the SSL-enabled virtual host that you configured in the above step.

   Code Block
   sudo a2ensite default-ssl.conf

5. Restart the Apache server to load the new virtual host file.

   Code Block
   sudo service apache2 restart