For use for one IP with more Vhosts,
see http://www.sambarserver.info/for/viewtopic.php?t=1810


Is also working here on other servers.

Steffen

www.surgemail.info

----- Original Message ----- 
From: "Hans Mittenbacher" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, February 16, 2004 3:13 PM
Subject: Re: [SM-USERS] base dir and ssl problem


> Hello,
>
> > > The problem is that some links within SM cut out the 'webmail' part of
> the
> > > URL, so the pages cannot be found (e.g. Compose, Addresses, Sign
out...)
> > > https://ssl.domain.tld/src/compose.php?mailbox=INBOX
> > > (the 'webmail'-part in the URL is missing, so the page isnt found)
> > >
> > > Other links from squirrel are put together correctly e.g. Next, Show
> All,
> > > Toggle All....
> > >
>
https://ssl.domain.tld/webmail/src/right_main.php?use_mailbox_cache=1&startMessage=26&mailbox=INBOX
> > > (the 'webmail'-part in the URL is correct and so the page is found)
> > >
>
> > Why make it complex? Apache has SSL support in special DSO module.
> >
> I have modssl up and running. The problem is, that if have only one IP
(one
> cert.) but I need ssl for more than one virtual host. So I set up an
> SSL-Proxy like this:
>
> #################
> # local SSL-proxy, which redirects https://domain to http://domain
> #################
> RewriteLock     /var/lock/rewrite.lock
>
> <VirtualHost 999.888.777.666:443>
>   DocumentRoot "/home/www/web1/html/sslproxy"
>   ServerName ssl.domain.de
>   SSLCipherSuite
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>   SSLCertificateFile /etc/httpd/ssl.crt/server.crt
>   SSLCertificateKeyFile /etc/httpd/ssl.key/server.key
>   SSLEngine on
>   RewriteEngine   on
>   RewriteLog      /var/log/httpd/sslproxy.log
>   RewriteLogLevel 1
>   RewriteMap      lowercase       int:tolower
>   RewriteMap      domaindb        txt:/etc/httpd/ssldomains
>   RewriteRule     ^/icons/(.+)  -                               [L]
>   RewriteRule     ^/w3c/(.+)      -                               [L]
>   RewriteRule     ^/([^/]+)/(.*)  /${lowercase:$1}/$2             [S=1]
>   RewriteRule     ^/(.*)          /${lowercase:$1}
>   RewriteRule     ^/www\.([^/]+)/(.*)
/${domaindb:$1|%{HTTP_HOST}/$1}/$2
> [S=2]
>   RewriteRule     ^/([^/]+)/(.*)
/${domaindb:$1|%{HTTP_HOST}/$1}/$2
> [S=1]
>   RewriteRule     ^/(.+)                  /$1/                    [R,L]
>   RewriteRule     ^/(.*)                  http://$1               [P,L]
> </VirtualHost>
>
>
> file ssldomains:
> #Path     ->    local domain
> first-domain.de       www.first-domain.de
> second-domain.de     www.second-domain.de
> webmail        www.mysquirrelmail.de
>
>
> That means: I call SSL websites like:
> https://ssl.domain.de/first-domain.de
> https://ssl.domain.de/second-domain.de
> SM : https://ssl.domain.de/webmail
>
> The ssl-proxy looks up the part after the https://ssl.domain.de/  (e.g.:
> first-domain.de) in the ssldomains-file and if it finds a matching entry,
> the request is redirected locally to the (non-ssl) virtual host.
> That means the traffic over the public net is encrypted, and the local
> traffic from my ssl-proxy to the virtual host is only local, so doesn't
need
> to be encrypted.
>
> And this configuration now makes problems:
> Some Squirrelmail links are put togehter correctly (like Next, Show
All....)
> and other links are not put together correctly (like Compose,
Addresses...)
> because the "webmail" part is cut out:
> I get https://ssl.domain.de/src/compose.php?mailbox=INBOX instead of
> https://ssl.domain.de/webmail/src/compose.php?mailbox=INBOX and so the
page
> cannot be found.
>
> The virtual host ssl-proxy is working correctly for other purposes, so i
> think the problem is how SM puts the links together or how it sets its
> base_url.
> For me its only necessary to provide a secure login, after that everything
> could be unencrypted (but would be nice to be also encrypted). The SM
> Plugins "secure login" and "show ssl link" provide a secure login, but
after
> authentication some links within SM are also not working correct.
>
>
> Any help? ;-)
> Nice story isnt it?
> Regards
> Hans
>
>
>
>
>
>
>
>
>
>
>
>
> -------------------------------------------------------
> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
> Build and deploy apps & Web services for Linux with
> a free DVD software kit from IBM. Click Now!
> http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
> --
> squirrelmail-users mailing list
> List Address: [EMAIL PROTECTED]
> List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
> List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
>



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to