EPP Server 1.0.15 Documentation

  * Requirements
  * Introduction
  * Installation
  * Configuration
  * Local documents:
      + Version history: ChangeLog
      + License: LICENSE

Requirements

	* Linux Fedora 26 or newer;
	* Perl v5.24.2 or newer;
	* PHP 7.1.9 or newer;
	* MariaDB 10.1.26 or newer;
	* mod_epp 1.10 http://sourceforge.net/projects/aepps/
	* mod_whois http://sourceforge.net/projects/modwhois/

Introduction

	EPP Server

Installation

dnf install -y mariadb-server bind bind-utils bind-sdb httpd httpd-devel mod_perl php-mcrypt php-mbstring perl-CPAN lynx perl-ExtUtils-Embed perl-XML-LibXML perl-CGI perl-YAML wget apr-util-mysql mod_ssl openssl-devel redhat-rpm-config pbzip2 perl-Test-Pod perl-File-Type perl-HTML-Template perl-MIME-Lite perl-Net-DNS perl-Net-SSLeay perl-XML-LibXML perl-XML-Parser perl-XML-Writer perl-XML-XPath perl-Authen-SASL perl-XML-Writer-String perl-MIME-Base64 perl-Email-Valid perl-CGI-Session gcc net-tools git


perl -MCPAN -e 'install Test';
perl -MCPAN -e 'install Net::EPP';
perl -MCPAN -e 'install Net::XWhois';


groupadd -g 7000 -r epp
useradd -c "EPP" -d "/var/www/cgi-bin/epp" -g 7000 -m -o -p YourPassWordHere -r epp -u 7000 -s /bin/bash


# download http://sourceforge.net/projects/aepps/ and install mod_epp
# mod_epp was developed by "Otmar Lendl"
wget http://downloads.sourceforge.net/project/aepps/mod_epp/1.10/mod_epp-1.10.tar.gz
tar -zxvf mod_epp-1.10.tar.gz
cd mod_epp-1.10
apxs -c -i mod_epp.c

wget http://downloads.sourceforge.net/project/modwhois/mod_whois/0.1/mod_whois-0.1.tar.gz
tar -zxvf mod_whois-0.1.tar.gz
cd mod_whois
apxs -c -i mod_whois.c





# Untar distribution direct on server:
tar -zxvf EPP_Server-1.0.15.tar.gz

# install database
systemctl enable mariadb
mysql_secure_installation
mysql -u root -p <registry.sql

# if you run selinux
semanage port -a -t http_port_t -p tcp 700
chmod 0755 /var/www/cgi-bin/epp

openssl genrsa -des3 -out /etc/pki/tls/private/www.xpanel.com.key 2048
openssl req -new -key /etc/pki/tls/private/www.xpanel.com.key -out /etc/pki/tls/private/www.xpanel.com.csr
# Removing passphrase from the RSA Private Key
openssl rsa -in /etc/pki/tls/private/www.xpanel.com.key -out /etc/pki/tls/private/www.xpanel.com.key_with_encryption




Configuration

mkdir /etc/registry
mkdir /usr/local/registry

	1. /etc/registry/registry.conf

	2. in MySQL
	SET PASSWORD FOR 'registry'@'localhost' = PASSWORD('EPPRegistry');
	SET PASSWORD FOR 'registry-select'@'localhost' = PASSWORD('EPPRegistrySELECT');
	SET PASSWORD FOR 'registry-update'@'localhost' = PASSWORD('EPPRegistryUPDATE');

	3. /etc/httpd/conf.d/epp.conf

# checking a remote certificate chain with openssl
openssl s_client -showcerts -connect xpanel.com:700

# test your connection from command line
openssl s_client -connect xpanel.com:700 -CAfile /etc/pki/tls/certs/gd_bundle.crt -cert /etc/pki/tls/certs/xpanel.com.crt -key /etc/pki/tls/private/www.xpanel.com.key

# registrar password
# https://httpd.apache.org/docs/trunk/misc/password_encryptions.html
htpasswd -ns username


If you find any bugs, or if you experience any crashes, then we would very much like to hear about the issue.
Please report any bugs at info@xpanel.com


RFC compliant
 - http://tools.ietf.org/html/rfc5730 - EPP
 - http://tools.ietf.org/html/rfc5731 - EPP Domain Name Mapping
 - http://tools.ietf.org/html/rfc5732 - EPP Host Mapping
 - http://tools.ietf.org/html/rfc5733 - EPP Contact Mapping
 - http://tools.ietf.org/html/rfc5734 - EPP Transport over TCP
 - http://tools.ietf.org/html/rfc3915 - Domain Registry Grace Period Mapping for EPP
 - http://tools.ietf.org/html/rfc5910 - (DNS) Security Extensions Mapping for EPP (under development)
 - http://tools.ietf.org/html/rfc3735




git clone https://github.com/certbot/certbot.git
cd certbot/
./letsencrypt-auto --help
systemctl stop httpd
./letsencrypt-auto certonly --standalone


SSLCertificateFile /etc/letsencrypt/live/epp.yourhostname.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/epp.yourhostname.com/privkey.pem
SSLCACertificateFile /etc/letsencrypt/live/epp.yourhostname.com/chain.pem
#SSLVerifyClient require