topic Re: how to enable 8888 port on HPux in Operating System - HP-UX

how to enable 8888 port on HPux

Binu_5 — Fri, 12 Aug 2005 03:19:05 GMT

Hi All

Can anybody tell me how to enable port 8888
on hpux11
I need to enable secured socket link in the above port (SSL)
Can any body help me in this

Thanks
Binu

Re: how to enable 8888 port on HPux

Rajesh SB — Fri, 12 Aug 2005 03:33:40 GMT

Hi,

Enabling port on HPUX11 similar to other Unix flavour. Just give an entry for port 8888 and service used by into /etc/services file.

If you are starting SSL service using "inetd" daemon, add entry of ssl service into /etc/inetd.conf and restart the "inetd" by

# /usr/sbin/inetd -c

Inetd daemon rereads the configuration file and initiates the updates.

I hope it serves your purpose.

Regards,
RAjesh

Re: how to enable 8888 port on HPux

Muthukumar_5 — Fri, 12 Aug 2005 03:36:03 GMT

Ports have to be configured in /etc/services.

# service port
example 8888

Save this change and execute related service with /etc/inetd.conf and restart inetd (daemon) as inetd -c.

hth.

Re: how to enable 8888 port on HPux

Binu_5 — Fri, 12 Aug 2005 03:38:56 GMT

Hi

I have to enable ssl for thsi port ....
What enry should I put in the
services file and ined.conf file

Binu

Re: how to enable 8888 port on HPux

Simon Hargrave — Fri, 12 Aug 2005 03:42:22 GMT

Assuming you're using the Apache server shipped with HPUX, you'll need to: -

Edit /opt/hpws/apache/conf/ssl.conf

Search and replace all references to 443 and change them to 8888.

Run /opt/hpws/apache/bin/apachectl startssl

You'll then be able to point your browser to:

https://yourserver:8888

Re: how to enable 8888 port on HPux

Rajesh SB — Fri, 12 Aug 2005 03:44:23 GMT

Hi,

1. Add this line into /etc/services

8888/tcp # OpenView Web Server

2. Give an entry in /etc/inetd.conf by following example in single line.
shell stream tcp nowait root /usr/lbin/remshd remshd

3. Run # /ust/sbin/inetd -c

Regards,
Rajesh

Re: how to enable 8888 port on HPux

Binu_5 — Fri, 12 Aug 2005 03:47:43 GMT

Hi Rajesh

Can you tell me the service ame for ssl

Binu

Re: how to enable 8888 port on HPux

Rajesh SB — Fri, 12 Aug 2005 03:50:44 GMT

Hi Binu,

Can you give some more details on your port enabling requirements like for what application.

Regards,
Rajesh

Re: how to enable 8888 port on HPux

Matti_Kurkela — Sun, 14 Aug 2005 04:26:58 GMT

What application are you going to use in port 8888? Without knowing that, we cannot give a specific answer.

Here's some generic information.
An application can be built in several different ways:

1.) The simple way: the application uses inetd to handle the real network connections. This is mostly used by small network service applications.
In this case, you set a name for your service and associate it with the port 8888 by writing a line in /etc/services. Then you add a line to /etc/inetd.conf to describe what you want started up when someone connects to the port. The inetd process will then open the port to "listen" for new connections.

2.) The semi-standalone way: the application handles the network connections itself, but refers to the port internally by some name. It asks the operating system to translate the port name to a port number, and then it uses that port number.
In this case, you must read the documentation of the application to find out the correct name, and then associate that name with the port 8888 by writing a line in /etc/services. Then you just start the application, and the application opens the port for use.

3.) The completely standalone way: there is a place for a port number in the application's configuration.
In this case, you just put "8888" in there and start the application. The application does all the rest.

If someone has installed an IPFilter or some other form of extra security, you may have to change also that security configuration to allow the connections succeed. IPFilter configuration is probably at /etc/opt/ipf/
if you're using a HP-supported version of IPFilter.

SSL is always done in the application level: nothing needs to be done with the operating system to "enable" SSL.

However, if you have an application that cannot do SSL on its own, you must use a SSL wrapper program to make it SSL-capable. "stunnel" is one such program. It is available for free at http://www.stunnel.org.

If you need to receive SSL connections, you must always have a SSL certificate.

You can make one yourself, but then nobody will trust it automatically, and the client connecting to your server will get a "untrusted certificate - do you really want to connect? (y/n)" messages. You can buy a certificate from companies like VeriSign or Thawte, and most clients can automatically verify that they are valid.

When you are getting a SSL certificate, you must remember that the certificate is tied to the DNS name of the server, *as seen by the client*. If you buy a certificate and then change the server's name, you have just wasted some money.