[Zope] SSL over Multiple Zope/Plone sites?

Jonathan Cyr cyrj at cyr.info
Tue Jan 24 17:38:19 EST 2006


er....

Pound can be found at http://www.apsis.ch/pound

-Jon

Jonathan Cyr wrote:
> You can have one HTTPS/SSL per IP per port.
>
> I use Pound instead of Apache, and can run an instance for each port.
>
> I use HTTPS on port 444, and 445 for testing/staging arrangements that 
> match the production HTTPS on 443.  I can set up a self-signed or 3rd 
> party certificate for each port, and the domain is set in each new 
> certificate.  And simply use a standard web page to redirect to the 
> new HTTPS port.  (https://stagingarea.something.com:444/directory)
>
> Also, you can use Pound to virtual host SSL sites, but the certificate 
> will not match, and a warning to the user.  If you accept the warning, 
> you are secure, but not very friendly.
>
> Pound can be found at http://www.pound.ch/pound  and is very Zope 
> friendly.
>
> This is not a user-friendly solution for production-level sites, but 
> great for staging/testing/experimental/admin needs.
> Not sure, if this helps,
>
> -Jon
>
> michael nt milne wrote:
>> Hi
>>
>> I've got a few Plone sites set-up using Apache through Zope. The 
>> question is, I'd like to implement SSL on the site login etc, as it's 
>> not secure without this. There's also one site I'd like to serve 
>> completely over https. However. I'm told that you can't run SSL on 
>> virtual hosts and can only have once SSL site per IP address.
>>
>> What would be the way round this? I know I could set-up SSL on Zope 
>> only using the following documentation:
>>
>> http://www.zope.org/Members/Ioan/ZopeSSL
>>
>> but if I can't carry this through to Apache then I'd have to run Zope 
>> as the web server as well as the application server.
>>
>> Thanks
>>
>> Michael
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Zope maillist  -  Zope at zope.org
>> http://mail.zope.org/mailman/listinfo/zope
>> **   No cross posts or HTML encoding!  **
>> (Related lists -  http://mail.zope.org/mailman/listinfo/zope-announce
>>  http://mail.zope.org/mailman/listinfo/zope-dev )
>>   
>

-- 
Jonathan Cyr
http://www.cyr.info
http://www.weddingweblog.com
cyrj at cyr.info

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.zope.org/pipermail/zope/attachments/20060124/a73999d9/attachment.htm


More information about the Zope mailing list