>>where did you read that?  what version do you have?  in my README, it
>>never really says where those settings are, but if you read the INSTALL
>>file, it clearly states that you should be editing the config file.  in
>>any case, notes about old versions from change logs are poor places to
>>figure out how to configure software.
> In the notes for 0.4 here:
> http://www.squirrelmail.org/plugin_view.php?id=61

fixed.  thanks.

>> > Then I found however that this option allows to switch back to http,
>> and
>> > does not enforce https. So allow me to repeat my question how one
>> would
>> > configure (wherever) so that certain directories are only accessible
>> via
>> > https.
>>
>>read the options carefully.  there is more than one setting you need to
>>deal with, and various combinations of them can be hazardous to your
>>health.  (or you can always do this thru your web server configuration if
>>you'd rather tackle that)
> I did, several times, but I honestly don't see an option to *force* https.
> I
> looked into doing this via the web server (Apache 2.0) but without success
> so far. I know this is off topic but an example would be very welcome. I
> looked at the Apache and mod_ssl docs but whatever I tried did not work.

   // if you want user sessions to remain in SSL for their entire duration,
   // set the following to zero:
   //
   $change_back_to_http_after_login = 0;

I think that's pretty clear.  Make sure this is zero.

   // if you want user sessions to remain in SSL only if they originally came
   // in thru SSL (this plugin didn't need to redirect them), set the
following
   // to one:
   //
   $remain_in_https_if_logged_in_using_https = 1;

This one should not make a difference in your case, since you are forcing
everyone to stay in HTTPS.  But set to 1 just in case.




-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to