Hello,

> > The problem is that some links within SM cut out the 'webmail' part of
the
> > URL, so the pages cannot be found (e.g. Compose, Addresses, Sign out...)
> > https://ssl.domain.tld/src/compose.php?mailbox=INBOX
> > (the 'webmail'-part in the URL is missing, so the page isnt found)
> >
> > Other links from squirrel are put together correctly e.g. Next, Show
All,
> > Toggle All....
> >
https://ssl.domain.tld/webmail/src/right_main.php?use_mailbox_cache=1&startMessage=26&mailbox=INBOX
> > (the 'webmail'-part in the URL is correct and so the page is found)
> >

> Why make it complex? Apache has SSL support in special DSO module.
>
I have modssl up and running. The problem is, that if have only one IP (one
cert.) but I need ssl for more than one virtual host. So I set up an
SSL-Proxy like this:

#################
# local SSL-proxy, which redirects https://domain to http://domain
#################
RewriteLock     /var/lock/rewrite.lock

<VirtualHost 999.888.777.666:443>
  DocumentRoot "/home/www/web1/html/sslproxy"
  ServerName ssl.domain.de
  SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile /etc/httpd/ssl.crt/server.crt
  SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
  SSLEngine on
  RewriteEngine   on
  RewriteLog      /var/log/httpd/sslproxy.log
  RewriteLogLevel 1
  RewriteMap      lowercase       int:tolower
  RewriteMap      domaindb        txt:/etc/httpd/ssldomains
  RewriteRule     ^/icons/(.+)  -                               [L]
  RewriteRule     ^/w3c/(.+)      -                               [L]
  RewriteRule     ^/([^/]+)/(.*)  /${lowercase:$1}/$2             [S=1]
  RewriteRule     ^/(.*)          /${lowercase:$1}
  RewriteRule     ^/www\.([^/]+)/(.*)     /${domaindb:$1|%{HTTP_HOST}/$1}/$2
[S=2]
  RewriteRule     ^/([^/]+)/(.*)          /${domaindb:$1|%{HTTP_HOST}/$1}/$2
[S=1]
  RewriteRule     ^/(.+)                  /$1/                    [R,L]
  RewriteRule     ^/(.*)                  http://$1               [P,L]
</VirtualHost>


file ssldomains:
#Path     ->    local domain
first-domain.de       www.first-domain.de
second-domain.de     www.second-domain.de
webmail        www.mysquirrelmail.de


That means: I call SSL websites like:
https://ssl.domain.de/first-domain.de
https://ssl.domain.de/second-domain.de
SM : https://ssl.domain.de/webmail

The ssl-proxy looks up the part after the https://ssl.domain.de/  (e.g.:
first-domain.de) in the ssldomains-file and if it finds a matching entry,
the request is redirected locally to the (non-ssl) virtual host.
That means the traffic over the public net is encrypted, and the local
traffic from my ssl-proxy to the virtual host is only local, so doesn't need
to be encrypted.

And this configuration now makes problems:
Some Squirrelmail links are put togehter correctly (like Next, Show All....)
and other links are not put together correctly (like Compose, Addresses...)
because the "webmail" part is cut out:
I get https://ssl.domain.de/src/compose.php?mailbox=INBOX instead of
https://ssl.domain.de/webmail/src/compose.php?mailbox=INBOX and so the page
cannot be found.

The virtual host ssl-proxy is working correctly for other purposes, so i
think the problem is how SM puts the links together or how it sets its
base_url.
For me its only necessary to provide a secure login, after that everything
could be unencrypted (but would be nice to be also encrypted). The SM
Plugins "secure login" and "show ssl link" provide a secure login, but after
authentication some links within SM are also not working correct.


Any help? ;-)
Nice story isnt it?
Regards
Hans












-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to