Hello, I'm trying to find out how to generate a CSR, and I can't find the information I need. All my research covers Zope and Apache or Zope and Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be exact. Unfortunately, I know next to nothing about setting up a secure server anyway. Any help you can offer would be much appreciated! Thanks, Cat ----- Catherine E. Reinehr Webmaster & Director of Publications Huntingdon College 1500 E. Fairview Ave. Montgomery, AL 36106 (334) 833-4429 / Flowers 218B
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 16.03.2009 18:16 Uhr, Catherine E. Reinehr wrote:
Hello,
I'm trying to find out how to generate a CSR, and I can't find the information I need. All my research covers Zope and Apache or Zope and Linux, etc., but our server is running ONLY Zope.
The recommended way for doing Zope + SSL is by using Apache, Squid or Varnish as reverse *especially* when you are using Zope on a public network. So please follow this recommendation. Setting Apache as SSL server is documented in tons of documents - and the related configuration for Zope behind an Apache server doing the SSL is also straight forward. - -aj -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkm+inEACgkQCJIWIbr9KYxBWgCfcKVry1jnf2O4LJ6wLS6JgxSU 0G8AoL4UZooAauWUuFDVlub0U1WTvn+u =o+lT -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Catherine, well.. I don't have much experience running SSL on Zope itself, but we use Apache in front and that works well. You'll just have to figure out some RewriteRule directives for Apache and configure it. Most SSL providers (that I've seen anyway) do have clear instructions on how to go about SSL when Apache is involved. - -Morten Catherine E. Reinehr wrote:
Hello,
I'm trying to find out how to generate a CSR, and I can't find the information I need. All my research covers Zope and Apache or Zope and Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be exact. Unfortunately, I know next to nothing about setting up a secure server anyway. Any help you can offer would be much appreciated!
Thanks, Cat
-----
Catherine E. Reinehr Webmaster & Director of Publications Huntingdon College 1500 E. Fairview Ave. Montgomery, AL 36106 (334) 833-4429 / Flowers 218B
_______________________________________________ Zope maillist - Zope@zope.org http://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce http://mail.zope.org/mailman/listinfo/zope-dev ) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkm+iocACgkQmq0JiiIWC2rBcwCeINv9NFBAnslnP/LQF/PpRpvm qVgAnRUjz/kEpkLT9SDctRAlFqqRXcGF =cQ9o -----END PGP SIGNATURE-----
Cat,
I'm trying to find out how to generate a CSR, and I can't find the information I need. If you are trying to generate a CSR, you probably need to use OpenSSL, not Zope. If your *Zope application* needs to generate a CSR for some reason, you need to interface OpenSSL from Zope somehow - either using command line interface (works great if you do it carefully) or using M2Crypto or another wrapper (more hassle than benefit, if you are not doing something really complex). Well, there is PyCrypto that I haven't looked into, maybe the bright future is here already :-). All my research covers Zope and Apache or Zope and Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be exact. Unfortunately, I know next to nothing about setting up a secure server anyway. Any help you can offer would be much appreciated!
With this ancient version of Zope you actually may have some luck setting up a secure server without Apache or another reverse, using hacks provided in the earlier versions of M2Crypto. Be careful: it leaks memory when not in a good mood. But really, consider putting Apache in the front. M
participants (4)
-
Andreas Jung -
Catherine E. Reinehr -
Michael Vartanyan -
Morten W. Petersen