2

I have little experience in being a web application administrator however I am a software developer. I inherited support for a legacy application that jkMount's a JBoss application server farm and the front end are two Apache 2.2.8 with OpenSSL servers preconfigured and running on Windows Server 2003.

The recent publicized security flaw triggered a response from my manager that I need to upgrade the Apache servers to the most secure version, 2.2.21.

I believe I know what I need to do in theory but I have never personally installed or upgraded Apache before so I am a little nervous. My plan was to:

  • Backup the existing installation location completely

  • Stop the Apache Servers

  • Install to the same location via the MSI installer I downloaded

  • Replace the installed contents of the /conf/ directory with the backed up contents of the pre-configured /conf/ directory (including SSL certs).

  • Restart the servers and pray to God/Allah/Spaghetti Monster.

Do you see anything that I may be missing? I imagine the only differences between 2.2.8 and 2.2.21 are just security updates and that configuration files should be interchangeable?

1
  • 1
    FYI, I updgraded Apache on my local test server following roughly these steps and it was a lot easier than I thought. The uninstaller for the old version left all of my configurations and third party modules untouched. I just installed the new version and everything is working fine, including SSL on test. – maple_shaft Sep 16 '11 at 16:29
2

Yup, you have it down fine, I was going to suggest testing it on another server first if you could, then I read your comment.

1
  • Thanks! I feel more confident now. I was hoping to get a quick and easy answer. I will do this tonight, if all goes well I will award you the points. – maple_shaft Sep 16 '11 at 19:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.