[Trac] securing apache/trac with ssl

2013-11-14 Thread Stuart Cracraft
Hi, We'd like to convert to an ssl-only apache for everything on the box. I've messed with rewrite rules and the like, with no success. It just removed access to existing url's to use https, like the trac login. Undoing those, put it back and trac login works and repository / browse works.

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Matthew Caron
On 11/14/2013 01:44 PM, Stuart Cracraft wrote: Hi, We'd like to convert to an ssl-only apache for everything on the box. I've messed with rewrite rules and the like, with no success. It just removed access to existing url's to use https, like the trac login. Undoing those, put it back and trac

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Matthew Caron
I see nothing in this config about Trac. I fear you may be missing something. Anyway, I think part of the issue may be: ServerName somewhere.over.the-rainbow.com:80 I've never used this format before (I use an overall Listen directive, and then a NameVirtualHost and separate VirtualHost

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Stuart Cracraft
Here is /etc/httpd/conf.d/trac.conf which is being included. ##LogLevel debug Alias /trac/chrome/common /u01/trac/apache/htdocs/common Alias /trac/chrome/site /u01/trac/apache/htdocs/site Directory /u01/trac/apache/htdocs Order allow,deny Allow from all /Directory

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Matthew Caron
Nothing in here sets up SSL, or does any VirtualHost stuff. So, I ask again, does https://somewhere.over.the-rainbow.com actually work? On 11/14/2013 04:17 PM, Stuart Cracraft wrote: Here is /etc/httpd/conf.d/trac.conf which is being included. ##LogLevel debug Alias /trac/chrome/common

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Stuart Cracraft
http://somewhere works but not https://somewhere. somewhereovertherainbow is ca-sna-pm01 error when trying to visit https is: This page can't be displayed - Make sure the web address https://ca-sna-pm01 is correct. - Look for the page with your search engine. - Refresh the

Re: [Trac] securing apache/trac with ssl

2013-11-14 Thread Matthew Caron
Your problem isn't rewrite rules. Your problem is that you haven't turned on https. I suggest you get that working, then figure out redirecting http traffic to https. Look at the apache SSL docs, specifically: SSLEngine on SSLCertificateFile /etc/apache2/ssl/server_cert.pem