On Jan 29, 2008, at 3:38 PM, Peter Jakobsson wrote:
Steve -
I am a bit stumped at how best to handle SSL connections with
Apache in front at the moment.
Can you tell us if 4D or Apache is actually doing the encryption ?
It looks like Apache from your rewrite code. Do you have the 'real'
certificate files configured in Apache ?
In my case, Apache. We have a domain certificate configured in Apache.
The problem I would have with this configuration is that if
Active4D is being passed SSL requests on a port other than 443, it
thinks they're not secure and the logic which tests for the secure
port breaks.
We could never get SSL working in 4D with client as the web server.
We finally gave up and made the whole site secure with Apache. I'm
serving two virtual hosts. One is an internal portal which we've
wanted to be secure for a while. The other is a site that allows on-
line applications for training we are conducting, so at least some of
it needed to be secure. There is actually a third site on the same
box that runs secure on Apache. It use some simple php that calls
Active4D through curl and allows downloads of pre-filed PDF
application for projects we have not switched over to on-line
applications. Then, why not, there is another virtual host on Apache
whose only purpose is to do file uploads using a drag and drop Java
applet and some php. The php calls back Active4D when a file has been
upload so it can move the file to the proper location.
I think 2004 allows SSL on ports other than 443, but we never tried
that. My *secure comes over as "0". I imagine you can listen to 443
and 80 on Apache and rewrite to different ports on 4D (say 8080 and
8443).
I am seem able to get secure requests served just using the code in
the Active4D Wiki, but "get request value(string(A4D Request Host
Port))" returns 8080 instead of 443 so I assume Apache is rewriting
everything to 4D's non-secure port at the moment.
Peter
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/
