Hi Adam, As soon as you plan to expose Arches or any other piece of software to the internet, SSL is a necessity. Since a few years we have started deploying every site over SSL, even fairly low risk ones. We also don’t do mixed http/https sites.
Generally it complicates matters slightly, but not too much. Actual configuration will rather depend on your setup. If you have a typical apache+mod_wsgi setup, apache will need to be configured to handle SSL termination. The impact on Arches itself should be minimal. When it comes to using basemap data, you need to be sure that the basemap provider also provides https versions of those maps, otherwise your users will get these irritating mixed content messages and security warnings. If you basemap provider doesn’t provide an SSL version, you can proxy the map locally, but this does have an impact on performance. In this case it’s better to not only proxy, but also cache them. You might like to use something like http://mapproxy.org (also in python) for this. Cheers, Koen Koen Van Daele Applicatiebeheerder M +32 (0)499 94 93 68 | T +32 (0)2 553 16 82 Van: [email protected] [mailto:[email protected]] Namens Adam Cox Verzonden: dinsdag 15 april 2014 15:55 Aan: [email protected] Onderwerp: Re: [Arches] startup considerations: SSL and server space Or, perhaps an SSL cert. is a really really bad idea. That would be good feedback too. On Tue, Apr 15, 2014 at 8:54 AM, Adam Cox <[email protected]<mailto:[email protected]>> wrote: Hello all, I'll be deploying arches in the fall, but I have some up front planning (and learning!) to do right now. The deployment will be on a brand new server to be housed here at the National Center for Preservation Technology and Training (NPS). I'm new to server admin (though I have support in that regard) so I have some questions for optimization of the deployment. 1. Any recommendations on which SSL certificate to go with? I believe it is a foregone conclusion that we will have an SSL for the domain, but I also know it can cause complications. I'd like to know if anyone has recommendations, especially with the idea of serving WMS/WFS from this server, or potentially pulling basemap data from elsewhere. 2. Anyone who has installed arches and loaded the sample data, about how much server space does that take up? Just curious for a baseline metric. Thanks! -- -- To post, send email to [email protected]<mailto:[email protected]>. To unsubscribe, send email to [email protected]<mailto:archesproject%[email protected]>. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to a topic in the Google Groups "Arches Project" group. To unsubscribe from this topic, visit https://groups.google.com/d/topic/archesproject/GmP_NUSfIq0/unsubscribe. To unsubscribe from this group and all its topics, send an email to [email protected]<mailto:[email protected]>. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to [email protected]<mailto:[email protected]>. To unsubscribe, send email to [email protected]<mailto:[email protected]>. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. For more options, visit https://groups.google.com/d/optout. -- -- To post, send email to [email protected]. To unsubscribe, send email to [email protected]. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
