Marius Flage wrote:
Steve Clark skrev:


Does anyone have documentation on the steps necessary to use https for
OTRS. I saw in sysconfig an option for https - but I know changes have to be
made in the apache config as well as making a certificate.


Just look at the apache documentation for enabling SSL. It's all down to that. The only thing in the OTRS configuration is about generating of the URLs.

Here's my configuration:

# ls -l /etc/apache2/sites-available/
total 4
-rw-r--r-- 1 root root 1160 2007-10-16 11:49 default
lrwxrwxrwx 1 root root 43 2007-10-19 11:27 <hostname> -> /var/vhosts/<hostname>/etc/apache2.conf lrwxrwxrwx 1 root root 47 2007-10-19 13:41 <hostname>.ssl -> /var/vhosts/<hostname>/etc/apache2.ssl.conf

Relevant configuration files:

# cat /var/vhosts/<hostname>/etc/apache2.conf
<VirtualHost *>
         ServerName <hostname>
         DocumentRoot /var/vhosts/<hostname>/htdocs
         ErrorLog /var/vhosts/<hostname>/log/error.log
         CustomLog /var/vhosts/<hostname>/log/access.log combined
         RedirectMatch ^/otrs/$ https://<hostname>/otrs/
         RedirectMatch ^/$ https://<hostname>/otrs/
</VirtualHost>

# cat /var/vhosts/<hostname>/etc/apache2.ssl.conf
NameVirtualHost *:443
<VirtualHost *:443>
     ServerName <hostname>:443
     DocumentRoot /var/vhosts/<hostname>/htdocs/
     CustomLog /var/vhosts/<hostname>/log/access.log combined
     ErrorLog /var/vhosts/<hostname>/log/error.log
     SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
     SSLCertificateFile /var/vhosts/<hostname>/etc/ssl/apache.pem
     RedirectMatch ^/$ /otrs/
</VirtualHost>

/var/vhosts/<hostname>/etc/ssl/apache.pem contains the self-signed certificate.

That should be it :) Of course make sure you have the relevant modules for apache loaded. I use mod_ssl.

Marius
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/


Thanks - I was also wondering in admin->sysconfig->core there is a selection for http/https
what does it do?
_______________________________________________
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
Support or consulting for your OTRS system?
=> http://www.otrs.com/

Reply via email to