On 3/7/07, Ben Bangert <[EMAIL PROTECTED]> wrote:
>
> On Mar 7, 2007, at 8:00 AM, John_Nowlan wrote:
>
> > Running over https is a requirement we have as well. I'd be curious
> > to know what people do / have done.
> >
> > Anyone know if https can run using a reverse proxy? I admit my
> > complete ignorance.
>
> Absolutely. Put Apache or another SSL capable server that can proxy,
> and proxy back to your app. There'll be an environment variable set
> to indicate it came in over SSL if you're using FCGI or SCGI. (Not
> sure if thats retained via HTTP proxy)
>
> > Reading  Marc Hedlunds http://radar.oreilly.com/archives/2007/03/
> > pycon_a_hiring.html [03.01.07 05:17 PM]  comments
> > about bug 1114345 https://sourceforge.net/tracker/?
> > func=detail&atid=305470&aid=1114345&group_id=5470 is disconcerting.
>
> I think that mainly reflects that not all code in the Python standard
> library is necessarily 'production' grade. The general impression
> I've gotten from Guido's emails about modules that make it into the
> Python library (especially from the wsgiref conversation), was that
> the modules included are to help you get started. They aren't all
> expected to be "production" ready since Python isn't released
> frequently enough.
>
> For example, the wsgiref module is a fairly bare (but complete)
> implementation of WSGI, and isn't as good as the WSGI server in
> CherryPy or elsewhere. If a bug is found in the CherryPy WSGI server,
> you can bet it'll be fixed long before its fixed in Python and a new
> Python is released (severe exploitable bugs in the Python library
> have been big enough to cause a new Python release, but that isn't at
> all common).
>
> Are there any other SSL capable HTTP servers written in Python that
> do SSL cert verification?

I think the standard answer is to just use Apache, as you mentioned.
I'm sure Nginx can do it too.  At PyCon, some Python guys reluctantly
admitted they were using ZXTM Zeus server for caching, load balancing,
and SSL accelaration, but that's not open source.

Best Regards,
-jj

-- 
http://jjinux.blogspot.com/

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to