Metacat

NameVirtualHost *:80

<VirtualHost *:80>

        DocumentRoot /var/lib/tomcat6/webapps/metacat

        ServerName <your_hostname_here>

        ScriptAlias /metacat/cgi-bin/ /var/lib/tomcat6/webapps/metacat/cgi-bin/

        <Directory "/var/lib/tomcat6/webapps/metacat/cgi-bin/">

                AllowOverride All

                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch

                Order allow,deny

                Allow from all

        </Directory>

        <IfModule mod_jk.c>

                JkMount /metacat ajp13

                JkMount /metacat/* ajp13

                JkMount /metacat/metacat ajp13

                JkMount /*.jsp ajp13

                JkUnMount /metacat/cgi-bin/* ajp13

        		JkOptions +ForwardURICompatUnparsed

        </IfModule>

       	AllowEncodedSlashes On

		AcceptPathInfo      On

</VirtualHost>

<IfModule mod_ssl.c>

NameVirtualHost *:443

<VirtualHost *:443>

        DocumentRoot /var/lib/tomcat6/webapps/metacat

        ScriptAlias /metacat/cgi-bin/ /var/lib/tomcat6/webapps/metacat/cgi-bin/

        <Directory "/var/lib/tomcat6/webapps/metacat/cgi-bin/">

                AllowOverride All

                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch

                Order allow,deny

                Allow from all

        </Directory>

        <IfModule mod_jk.c>

                JkMount /metacat ajp13

                JkMount /metacat/* ajp13

                JkMount /metacat/metacat ajp13

                JkMount /*.jsp ajp13

                JkUnMount /metacat/cgi-bin/* ajp13

                JkOptions +ForwardURICompatUnparsed

        </IfModule>

        AllowEncodedSlashes On

        AcceptPathInfo      On

        #   SSL Engine Switch:

        #   Enable/Disable SSL for this virtual host.

        SSLEngine on

        SSLOptions +StrictRequire +StdEnvVars +ExportCertData

        #   A self-signed (snakeoil) certificate can be created by installing

        #   the ssl-cert package. See

        #   /usr/share/doc/apache2.2-common/README.Debian.gz for more info.

        #   If both key and certificate are stored in the same file, only the

        #   SSLCertificateFile directive is needed.

        SSLCertificateFile /etc/ssl/certs/<your_cert_name>.crt

        SSLCertificateKeyFile /etc/ssl/private/<your_cert_name>.key

        SSLCertificateChainFile /etc/ssl/certs/<CA chain file>.crt

        #   Certificate Authority (CA):

        #   Set the CA certificate verification path where to find CA

        #   certificates for client authentication or alternatively one

        #   huge file containing all of them (file must be PEM encoded)

        #   Note: Inside SSLCACertificatePath you need hash symlinks

        #         to point to the certificate files. Use the provided

        #         Makefile to update the hash symlinks after changes.

        # Use the correct DataONE chain for validating client certificates

        # see: https://repository.dataone.org/software/tools/trunk/ca

        SSLCACertificatePath /etc/ssl/certs/

        #SSLCACertificateFile /etc/ssl/certs/DataONECAChain.crt

        SSLVerifyClient optional

        SSLVerifyDepth  10

        #   Client Authentication (Type):

        #   Client certificate verification type and depth.  Types are

        #   none, optional, require and optional_no_ca.  Depth is a

        #   number which specifies how deeply to verify the certificate

        #   issuer chain before deciding the certificate is not valid.

        <Location /metacat/servlet/replication>

                SSLVerifyClient require

                SSLVerifyDepth  10

        </Location>

		# disable SSL v2 and v3

		# intermediate configuration from https://mozilla.github.io/server-side-tls/ssl-config-generator/

		SSLProtocol             all -SSLv2 -SSLv3

		SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA

		SSLHonorCipherOrder     on

</VirtualHost>

</IfModule>

lives (e.g., ``/var/lib/tomcat6/webapps/metacat``). The path is a combination 

of the Web application directory (e.g., ``/var/lib/tomcat6/webapps/``) and 

* `Java 6`_ (Note: Java 5 is deprecated)

.. _Java 6: http://www.oracle.com/technetwork/java/javaee/overview/index.html

7. ``sudo /etc/init.d/tomcat6 restart``

metacat-site       Sample Web definition file used by Apache on Ubuntu/Debian 

metacat-site-ssl   Sample SSL definition file used by Apache on Ubuntu/Debian 

* `Java 6`_

Java 6

To run Metacat, you should use Java 6 (Java 5 is deprecated and will not be

supported after Metacat version 1.9.2). Make sure that the JAVA_HOME

To install Java if you are running Ubuntu_/Debian, you can download the appropriate self-extracting installer:: 

  wget http://download.oracle.com/otn-pub/java/jdk/6u30-b12/jdk-6u30-linux-x64.bin

and follow these commands to install::

  sudo mkdir -p /opt/java/64

  sudo mv jdk-6u30-linux-x64.bin /opt/java/64

  cd /opt/java/64

  sudo chmod +x jdk-6u30-linux-x64.bin

  sudo ./jdk-6u30-linux-x64.bin

  sudo update-alternatives --install "/usr/bin/java" "java" "/opt/java/64/jdk1.6.0_30/bin/java" 1

You must accept the license agreement during the install process.

We recommend that you install Tomcat 6 into the directory of your choice.

  sudo apt-get install tomcat6

	/etc/tomcat6/catalina.properties

4. Apache needs to know about the Metacat site. The helper file named "metacat-site" has rules that tell Apache which traffic to route to Metacat. Set up Metacat site by dropping the metacat-site file into the sites-available directory and running a2ensite to enable the site:

  sudo cp <metacat_helper_dir>/metacat-site <apache_install_dir>/sites-available

  sudo a2ensite metacat-site

3.  Install the Metacat WAR in the Tomcat web-application directory. For instructions on downloading the Metacat WAR, please see Downloading Metacat.  Typically, Tomcat will look for its application files (WAR files) in the <tomcat_home>/webapps directory (e.g., /usr/share/tomcat6/webapps). Your instance of Tomcat may be configured to look in a different directory. We will refer to the Tomcat application directory as <tomcat_app_dir>.  NOTE: The name of the WAR file (e.g., metacat.war) provides the application context, which appears in the URL of the Metacat (e.g., http://yourserver.com/metacat/). To change the context, simply change the name of the WAR file to the desired name before copying it.  To install the Metacat WAR:

    sudo /etc/init.d/tomcat6 restart

    /etc/init.d/tomcat6 stop

    /etc/init.d/tomcat6 restart

    sudo cp <metacat_package_directory>/authority.war /usr/share/tomcat6/webapps

    /etc/init.d/tomcat6 restart

* `Java 6`_

Java 6

To run Metacat, you must have Java 6. (Java 5 is deprecated). Make sure that

1. Browse to: http://java.sun.com/javase/downloads/widget/jdk6.jsp and follow

   the instructions to download JDK 6.

    System Variable: JAVA_HOME C:\Program Files\Java\jdk1.6.0_18 

We recommend that you install Tomcat version 6.  To download and install Tomcat:

   replication API is utilized. The helper file named "metacat-site-ssl" has default 

   Set up these SSL settings by copying the metacat-site-ssl file into the ``sites-available`` 

   ``a2ensite`` to enable the site. (Note: some settings in metacat-site-ssl need to be 

     sudo cp <metacat_helper_dir>/metacat-site-ssl <apache_install_dir>/sites-available

     sudo a2ensite metacat-site-ssl

     sudo /etc/init.d/tomcat6 restart

into effect. To restart Tomcat, type: ``sudo /etc/init.d/tomcat6 restart`` or an 

    /etc/init.d/tomcat6 restart

workers.tomcat_home=/usr/share/tomcat6

workers.java_home=/usr/lib/jvm/java-1.6.0-sun