Optimal Apache/Web Gateway settings

Question

Question

Scott Roth · Feb 25, 2022

#Performance #SSL #Web Gateway #HealthShare

After what is seemed was weeks, I finally got SSL/TLS enabled on both Apache Web Server and IRIS using the Web Gateway. However while we can now use HTTPS to connect to our Development instance of IRIS, I am running into several errors when I have others try to access the Management Portal via HTTPS.

We are seeing...

"Unexpected status code, unable to process Hyper Event: Internal Server Error (500)"
Server Unavailable

Does anyone have a Optimal settings list that I need to set for Apache/Web Gateway https? I am assuming the errors listed above are some kind of time out or settings somewhere.

Thanks

Scott Roth

Product version: IRIS 2021.2

$ZV: IRIS for UNIX (Red Hat Enterprise Linux for x86-64) 2021.2 (Build 649U) Thu Jan 20 2022 08:46:29 EST

Discussion (6)3

Log in or sign up to continue

Vic Sun · Feb 28, 2022

It's tough to say without knowing your config and what exactly was done. For the second error at least it seems reasonably clear what could be causing it, maybe that will help to resolve the first error as well? I'm not an Apache expert so take my personal advice with a grain of salt, I just know that many people have found Mark's article to be helpful.

https://stackoverflow.com/questions/24060620/error-starting-apache-httpd-configuration-error-more-than-one-mpm-loaded

1 0

score 0 · Answer 1 · 2022-02-26T00:52:53-05:00

Stefan Cronje · Feb 26, 2022

Hi,

This might be an obvious question... What is the license usage when this happens?

0 0

score 0 · Answer 2 · 2022-02-28T07:23:14-05:00

Very minimal since this is a development system and has not been released to my group as of yet. At the most maybe 2 or 3 users as of right now.

score 0 · Answer 3 · 2022-02-28T09:38:36-05:00

Hi Scott, check out this article. Hope it helps!

https://community.intersystems.com/post/apache-httpd-web-server-configuration-healthshare

score 0 · Answer 4 · 2022-02-28T11:00:00-05:00

I have tried what it suggested but now I am getting the following error and can not start apache...

[root@xxxxxxx conf.modules.d]# apachectl configtest
[Mon Feb 28 11:00:01.370361 2022] [so:warn] [pid 762836:tid 140580690286912] AH01574: module cgid_module is already loaded, skipping
AH00534: httpd: Configuration error: More than one MPM loaded.
[root@int-lxiris-vd01 conf.modules.d]#

I also have noticed as soon as I turned on SSL/TLS on the web gateway I start getting

Server Unavailable

but as soon as I turn it off it works again. Is it truly secure at that point?

score 1 · Answer 5 · 2022-02-28T11:16:57-05:00

As for the server unavailable error, I think you should review the instance's audit log and CSP log to see why that's happening.