On Mar 7, 2007, at 8:00 AM, John_Nowlan wrote:

> Running over https is a requirement we have as well. I'd be curious  
> to know what people do / have done.
>
> Anyone know if https can run using a reverse proxy? I admit my  
> complete ignorance.

Absolutely. Put Apache or another SSL capable server that can proxy,  
and proxy back to your app. There'll be an environment variable set  
to indicate it came in over SSL if you're using FCGI or SCGI. (Not  
sure if thats retained via HTTP proxy)

> Reading  Marc Hedlunds http://radar.oreilly.com/archives/2007/03/ 
> pycon_a_hiring.html [03.01.07 05:17 PM]  comments
> about bug 1114345 https://sourceforge.net/tracker/? 
> func=detail&atid=305470&aid=1114345&group_id=5470 is disconcerting.

I think that mainly reflects that not all code in the Python standard  
library is necessarily 'production' grade. The general impression  
I've gotten from Guido's emails about modules that make it into the  
Python library (especially from the wsgiref conversation), was that  
the modules included are to help you get started. They aren't all  
expected to be "production" ready since Python isn't released  
frequently enough.

For example, the wsgiref module is a fairly bare (but complete)  
implementation of WSGI, and isn't as good as the WSGI server in  
CherryPy or elsewhere. If a bug is found in the CherryPy WSGI server,  
you can bet it'll be fixed long before its fixed in Python and a new  
Python is released (severe exploitable bugs in the Python library  
have been big enough to cause a new Python release, but that isn't at  
all common).

Are there any other SSL capable HTTP servers written in Python that  
do SSL cert verification?

Cheers,
Ben

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to