Jean-Sebastien Delfino wrote:
Jean-Sebastien Delfino wrote:
An interesting article on SCA/Tuscany:
http://www.drdobbs.com/tools/223800269

On a related note, I think it would be good to have a few Tuscany samples showing how to use HTTPS, as an alternative to OpenVPN if for example you can't use a VPN with your hosting platform.


I'm going to experiment a bit over the weekend and try to make the sca-cpp tests work with HTTPS using Apache HTTPD mod_ssl [1].

It shouldn't be too hard as the SSL setup is well documented [2].

I've played around with Apache and OpenSSL and put together a few example scripts showing how it can be done:

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-ca-conf
creates a test CA (certification authority) certificate.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-cert-conf
creates test certificates, signed by the above CA.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-ssl-conf
configures Apache HTTPD to use SSL with the above CA and certificates.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/test/store-python/ssl-start
runs the store-python test app using SSL with either client/server certificate-based authentication or password-based HTTP basic authentication.

I've also added support for SSL client certificates and HTTP basic authentication to the WSGI code, allowing WSGI apps to talk to other servers over HTTPS.

Hope this helps.

It'd be nice if somebody else could try with sca-java as well.

[1] http://httpd.apache.org/docs/2.0/mod/mod_ssl.html
[2] http://httpd.apache.org/docs/2.0/ssl/
--
Jean-Sebastien

Reply via email to