Hi, the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS. Is the best thing to do here to run it behind Apache with mod_ssl, or use the ZServerSSL in M2Crypto? and if with Apache, is Apache 2.0 or 1.3.xx better? TIA Ben Avery YouthNet UK
On Tuesday 13 August 2002 15:28, you wrote:
Hi,
the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.
Is the best thing to do here to run it behind Apache with mod_ssl, or use the ZServerSSL in M2Crypto?
and if with Apache, is Apache 2.0 or 1.3.xx better?
TIA
Ben Avery YouthNet UK
You may want to have a look at http://www.apsis.ch/pound - it was developped exactly for this kind of installation... -- Robert Segall Apsis GmbH Postfach, Uetikon am See, CH-8707 Tel: +41-1-920 4904
Sorry, I've just noticed on the M2Crypto homepage (http://www.post1.com/home/ngps/m2/) that ZServerSSL doesn't yet work on Zope 2.5, which I'm running. bummer. Ben Ben Avery wrote:
Hi,
the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.
Is the best thing to do here to run it behind Apache with mod_ssl, or use the ZServerSSL in M2Crypto?
and if with Apache, is Apache 2.0 or 1.3.xx better?
TIA
Ben Avery YouthNet UK
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
Apache 1.3.x vs Apache 2.x Depends if you fx want to use PHP you should go for Apache 1.3.x If you only want to use Apache as a Proxy for Zope then you should use 2.x But any way use Apache as your proxy. Just my 2 pence. \Oliver Ben Avery wrote:
Hi,
the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.
Is the best thing to do here to run it behind Apache with mod_ssl, or use the ZServerSSL in M2Crypto?
and if with Apache, is Apache 2.0 or 1.3.xx better?
TIA
Ben Avery YouthNet UK
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
On Tuesday 13 Aug 2002 2:28 pm, Ben Avery wrote:
Hi,
the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.
Is the best thing to do here to run it behind Apache with mod_ssl
If you care about security then you really need to run zope behind a front-end proxy. either Apache/mod_ssl or Squid are good.
, or use the ZServerSSL in M2Crypto?
That good if you need something lightweight, and squid/apache are too heavy. For most people this a bad compromise IMO.
I run some places of a Zope site behind Apache 1.3.26 + mod_ssl, using a VirtualHostMonster (Zope side) and a VirtualHost (Apache side). It's completely transparent to Zope. Just never use namely "http://..." or "https://" in your DTML, ZPT (...) scripts but always "compute" your URLs. --Gilles ----- Original Message ----- From: "Ben Avery" <ben@thesite.org> To: <zope@zope.org> Sent: Tuesday, August 13, 2002 3:28 PM Subject: [Zope] Zope and HTTPS
Hi,
the site I'm developing will need to run over HTTPS, behind a load balancer, maybe with ZEO, and will need to also serve XML-RPC over HTTPS.
Is the best thing to do here to run it behind Apache with mod_ssl, or use the ZServerSSL in M2Crypto?
and if with Apache, is Apache 2.0 or 1.3.xx better?
TIA
Ben Avery YouthNet UK
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
participants (5)
-
Ben Avery -
Gilles Lenfant -
Oliver Marx -
Robert Segall -
Toby Dickenson