Re: [SOGo] Best practice to force https in SOGo.conf

[Igor Vitorac]

Just make sure that you have adapted following lines in <VirtualHost 
_default_:443> i.e. to refer only to https and 443

RequestHeader set "x-webobjects-server-port" "*443*"
RequestHeader set "x-webobjects-server-name" "sogo.example.com"
RequestHeader set "x-webobjects-server-url" "*https*://sogo.example.com"
Regards,
Igor



sr wrote on 07/08/2014 14:35:
Hello Sven, hello all,

Thanks for the answer, finaly I just put this on httpd.conf and it's 
work :

<VirtualHost *:80>
   ServerName yourdomain.yourdomain/SOGo
   Redirect permanent /SOGo https://yourdomain.yourdomain/SOGo
</VirtualHost>

the <VirtualHost _default_:443> section is on a separe file named ssl.conf

thanks!





Le 06/08/2014 17:43, Sven Arnold a écrit :
Hello Samuel,

What is the best way to force people using HTTPS when they come in sogo
site? ( virtual hosts? .htaccess file? )

That depends (of course) on your webserver and setup. If you are 
using apache you can perform a simple redirect on requests on port 80 
similar to:

<VirtualHost *:80>
    RedirectMatch ^/$ https://yourdomain.yourdomain/SOGo
</VirtualHost>

and of course put your SOGo configuration inside of:

<IfModule mod_ssl.c>
<VirtualHost _default_:443>
...
</VirtualHost>
</IfModule>

Is there a way to enable https just for authentification?

Maybe that is possible, but is this useful? I suppose you do not only 
want to secure authentication but also email content?

Thanks all!
Samuel

Regards,

Sven



--
users@sogo.nu
https://inverse.ca/sogo/lists