[Zope-CMF] Basic Auth and SSL?

seb bacon subscriptions@jamkit.com
Mon, 10 Jun 2002 00:00:02 +0100


I use Apache as the server, and use mod_rewrite to redirect any requests 
for the login form to port 443.  You then need to make logged_in 
redirect to port 80.

For example (off the top of my head, so is probably wrong):

   RewriteCond ^/(.*)/login_form   https://%{HTTP_HOST}/$1/login_form

seb

Carl Rendell wrote:
> I'm sure someone has already run across this so I thought I'd ask the 
> group.
> 
> Short of running the server or proxy server full time over SSL, it is 
> possible or practical to run just the login screens and/or basic Auth 
> over that port?
> 
> For the most part I've been dealing with internal (inside the firewall) 
> deployments, but I just received a request to expose information outside 
> of the firewall as well. I've been doing research on all the sites, but 
> nothing has popped out yet.
> 
> If anyone cares to wade in with their opinion or experience on SSL, 
> authentication over SSL, and so on. I would appreciate it.
> 
> BTW: is this a question for this list? If not which list would you suggest?
> 
> ~C
> 
> Carl E. Rendell
> Solution43
> Information Distribution Consulting        |   "Ahhhh the power of
> cer@sol43.com                              |    acquisition"  - Chef Z
> 
> 
> 
> _______________________________________________
> Zope-CMF maillist  -  Zope-CMF@zope.org
> http://lists.zope.org/mailman/listinfo/zope-cmf
> 
> See http://www.zope.org/Products/PTK/Tracker for bug reports and feature 
> requests