Hi,

I set up a syncevolution server (git from yesterday) on a Debian Lenny
server and it works great.

The syncevo-http-server can't use HTTP. To prevent my data from being
sent unencrypted, I set up an apache with mod_proxy to "convert" the
syncevolution HTTP server to HTTPS [1], which works fine.

However, the synceto-http-server listens on all interfaces, which still
allows unencrypted access.  As a quick fix, I added a "localhost" to
the reactor.listenTCP() call.  I think that for a real fix, the
hostname could be extraced from the URL argument and used for the
reactor.listenTCP(), if the user provides an option for "listen to the
interface with the host only".

Regards,
Tino

[1] 
http://www.onlinehowto.net/Tutorials/Apache-Web-Server/Strip-SSL-with-Apache-mod-proxy-part-one/1051
_______________________________________________
SyncEvolution mailing list
[email protected]
http://lists.syncevolution.org/listinfo/syncevolution

Reply via email to