Apache Security from A-Z

For copies of this tutorial:

• http://stein.cshl.org/~lstein
• http://www.modperl.com/

• Introduction
  1. What is Security?
  2. What are the Risks?
  3. Don't let this happen to you!
  4. Who do the risks come from?
  5. Where do the risks come from?
• Part I: System Security
  1. Steps to Securing the Host
  2. Creating a Security Policy
  3. Auditing your System
  4. Configuring your System
  5. About Firewalls 1
  6. About Firewalls 2
  7. About Firewalls 3
  8. Avoiding Common Problems
  9. Apache Tips for DOS Attacks

• Part II: Apache Access Control
  1. Types of Access Control
  2. Host-Based Access Control
  3. Host-Based Access Control Directives
  4. Common Templates for Host-Based Access Control
  5. Access Control Using Environment Variables
  6. Basic Authentication
  7. How Basic Authentication Works
  8. Getting Started with Basic Authentication
  9. Protecting a Directory with Basic Authentication
  10. Alternative Basic Databases
  11. Combining User Authentication with Host Restrictions
  12. Digest Authentication

• Part III: Secure Sockets Layer
  1. Symmetric Cryptography
  2. Public Key Cryptography
  3. Digital Envelopes
  4. Digital Signatures
  5. Message Authentication Codes
  6. Certification Authorities
  7. Transmitting a Public Key
  8. About SSL
  9. SSL and Apache
  10. Obtaining a Server Certificate Using OpenSSL
  11. Authenticating with SSL

• Bibliography