[Zope] - Zope and SSL

Andreas Kostyrka andreas@ag.or.at
Sat, 12 Dec 1998 00:06:18 +0100 (CET)


On Fri, 11 Dec 1998, Ronald Offerman wrote:

> I can run a secure Zope using pcgi and Apache-SSL. Anyone know of a way how to 
> have ZopeHTTPServer do SSL?
Use mod_proxy with Apache-SSL. For example:
RewriteEngine on
RewriteRule ^/intern(.*)        http://127.0.0.2:5000$1 [P]

This assumes two things:
-) You have an 127.0.0.2 lo:0 alias active ;)
-) You have a patched BoboHTTPServer.py running there.

> I don't want to allow management over insecure channels so is it possible to 
> use a rewrite/URL refresh rule in Zope for /manage (it should redirect to 
> https:)
That's another thing I've been thinking about:
-) BoboHTTPServer when running in nonssl mode should map the Non-Auth
   error code to another error code -> When accessing the http:// url
   the user isn't even prompted for an username/password :)

Andreas
-- 
Win95: n., A huge annoying boot virus that causes random spontaneous system
     crashes, usually just before saving a massive project.  Easily cured by
     UNIX.  See also MS-DOS, IBM-DOS, DR-DOS, Win 3.x, Win98.