The Design And Implementation Of Configuration Manage Of Security Web System

As Internet is in worldwide fast popularization what and used wasdeepened constantly, the online security question causes the great attention ofthe countries all over the world, among them, WEB systematic one's ownsecurity is particularly important. The security Web systematic environmentof the basis of this text includes such some as Apache2, Tomcat server andMozilla browser etc.. The groundwork that this text finishes is to carry on themerger of Apache and Tomcat, has realized the configuration managementmodule of safe WEB system, have realized the module of ground floor ofconfiguration management in C language; Utilize JNI technology of Java, hasdesigned upper interface of the configuration management module andtransfered the module of ground floor. Realize the interface of configurationmanagement finally, carry on visual configuration through the browser visitsWEB, reach more ocular operation result disposed to safe WEB system.Design process is it is it encrypt equipment interface to dispose to increase, inwhile being convenient, ocular to realize configuration management, haveguaranteed the security of configuration management further.According to safe Web systematic characteristic and function demandfor the configuration management module, safe Web system has thefollowing function characteristic: 1.The end of the server and customer endcan be operated on different platforms; 2.the end of the server and customerend support one pair of certificates application, the compatible formcertificate and non-safe way at the same time; 3.the end of the server andcustomer end stand and encrypt the equipment hard; 4.can last applicationserver end and customer end (by the hard to encrypt equipment sign). 5.configuration management has better real-time performance. This requiresconfiguration management module to have characteristic which steps theplatform, real-time character, should compatible form certificate and safeway non-, support hard to encrypt the management and disposition of theequipment. At the same time according to the needs of reality, theconfiguration management interface adopts B/S way to realize.The realization of safe WEB system is carried on on the basis of WEBserver and browser increasing income, safe WEB service end of system adoptripe a steady one, open Apache +tomcat of source code as safe WEB server,on foundation this, carry on transformation (for end support pairs ofcertificate use in server mainly), SSL of agreement and hard to encryptembedding of equipment. The customer end of safe WEB system adopts thebrowser of the opening source codes of Netscape Company, browser thishave one support hard to encrypt software of equipment, stand opposite eachother more steady, on foundation this, carry on transformation, SSL ofagreement, make it support pairs of certificate application. Security WEBserver system and security WEB browser system adopted can be operated ondifferent operating platform foundations. On the basis of this system, we haverealized user's configuration management with friendly boundary plane. In the function demand for configuration management is analysed,according to the function characteristic of popular WEB server now, is itintegrate to go on to Tomcat server and Apache server, is it is it revisedisposition of Apache open way, httpd.conf of file by hand at the parameter tochange to want, increase the long-range function that controls. In order torealize safe WEB system can support one pair of certificates and encrypt theembedding of the equipment hard, the control server making administrator'sconvenience flexible, need it on the basis of carrying on the demand analysisof the systematic function , modeling, make the configuration managementmodule combine the configuration management of Apache and configurationmanagement of Tomcat. On the basis of this system, we have realized user'sconfiguration management with friendly boundary plane. In addition, in thefunction is analysed, have done the comparison of a certain degree withrelevant products. In the course of design and realizing of the configuration managementmodule, adopt the procedure design of structurization facing course mainly,realize B/S structure of the configuration management module. The systemdemands to offer good real-time character during the process of carrying onconfiguration management, so ground floor module, configurationmanagement of module use c language realize, is it realize jsp andcommunication, ground floor of code to transfer through local interface JNIof java. Can be obtained, added, revised, deleted to every parameter ofdisposing of Apache server while disposing the management expectancy,increase the disposition of use for SSL agreement, enable Web system tosupport one pair of certificates, reach the function of using the certificate,revising the certificate, deleting the certificate etc.. In order to make theinformation transmission safer, Apache server can be introduced andencrypted the module, reserve the interface which encrypts the module in...