Re: HTTPS Connection for Web Module

[Tom DeMeo via 4D_Tech]

Hi,


One of the main reasons to use 4D to publish on the web is the efficient 
simplicity of the architecture. There may be circumstances where putting 
another web server such as Apache in front is worth the trouble, but all too 
often, its done for no good reason. 

Getting the correct files for an SSL cert for your web server is not solved in 
any way by adding another layer to your architecture, unless there is already 
an Apache server with SSL in place for you to use. Just go back to your IT  
department and make sure they give you both the cert and key files. 


Tom DeMeo
**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: HTTPS Connection for Web Module

[Douglas Cryer via 4D_Tech]

Ronnie,

As painful as it may seem I would second the comment made by Dani:

>  I would consider putting Apache or NGINX in front of your 4D v11 application 
> and configure Apache/NGINX as a reverse proxy to your 4D app. >  There has 
> been messages on the nug that can tell you how to do that.

I have done this with Apache.  It took a lot of reading and trial and error.  
It was somewhat frustrating but it was secure.  It does have some additional 
benefits too as you can display a maintenance page when your 4D system is down.

With v11 you can get HTTPS but if your client's IT do any testing you will 
quickly find it rather lacking when compared against todays stringent security 
requirements.  With v15/v16 you can get an A rating with v17 you can get an A+ 
rating.  With v11 native not so good...

Regards,  Dougie


telekinetix Limited- J. Douglas Cryer
Phone : 01234 761759  Mobile : 07973 675 218
2nd Floor Broadway House, 4-6 The Broadway, Bedford MK40 2TE
Email : jdcr...@telekinetix.com  Web : http://www.telekinetix.com 


 
 



**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: HTTPS Connection for Web Module

[Dani Beaubien via 4D_Tech]

Hi Ronnie, I would consider putting Apache or NGINX in front of your 4D v11 
application and configure Apache/NGINX as a reverse proxy to your 4D app. There 
has been messages on the nug that can tell you how to do that.

Dani


> On May 4, 2018, at 12:41 AM, Ronnie Teo via 4D_Tech <4d_tech@lists.4d.com> 
> wrote:
> 
> Hi,
> 
> I’ve written earlier about a 4Dv11 application with a web module.  
> The client's IT now wants all access to be secured and only allow https 
> connections.
> 
> According to the manual, we would need to place 2 files alongside the 
> structure files in the database folder, namely the cert.pea dn key.em.
> However, the client’s IT has generated only one certificate file with a .cer 
> extension.
> 
> May I ask how I should proceed?
> 
> Regards,
> Ronnie
> Tarawerkz
> 
> 
> 
> 
> **
> 4D Internet Users Group (4D iNUG)
> FAQ:  http://lists.4d.com/faqnug.html
> Archive:  http://lists.4d.com/archives.html
> Options: https://lists.4d.com/mailman/options/4d_tech
> Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
> **

**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

HTTPS Connection for Web Module

[Ronnie Teo via 4D_Tech]

Hi,

I’ve written earlier about a 4Dv11 application with a web module.  
The client's IT now wants all access to be secured and only allow https 
connections.

According to the manual, we would need to place 2 files alongside the structure 
files in the database folder, namely the cert.pea dn key.em.
However, the client’s IT has generated only one certificate file with a .cer 
extension.

May I ask how I should proceed?

Regards,
Ronnie
Tarawerkz




**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

Re: HTTPS Connection for Web Module

[Keisuke Miyako via 4D_Tech]

in your URL do you specify the HTTPS port number,
or is it set to 443 in your 4D database settings?



**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**

HTTPS Connection for Web Module

[Ronnie Teo via 4D_Tech]

Hi All,

I have  a 4Dv11 application with a web module.  
The client's IT now wants all access to be secured and only allow https 
connections and I'm a bit lost as to what to do.

I think I’ve managed to create a cert.pem file, put the key.pem and the 
cert.pem files together with the structure.
I’ve enabled SSL on the 4Dv11 Server in the HTTP Server settings.

But when I test web connection, http continues to work while https does not?
The http connection goes through as usual, but there is note beside the URL 
that say “Not secured”
With the https connection, the browser error says “This sire cannot be reached. 
 [IP Address] refused to connect"

What have I done wrong?

Regards,
Ronnie
Tarawerkz




**
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: https://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:4d_tech-unsubscr...@lists.4d.com
**