Seaside and Apache

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Seaside and Apache

Schwab,Wilhelm K
Hello all,

After a few days of getting almost nothing (even in logs, which was
driving me nuts), I tried a different approach and had a self-signed
https Apache proxying Seaside.  I will start to congratulate myself
when
I can reproduce it.  Toward that end, I have been writing some truly
ugly code to capture how to do some things.

First, I have ported part of some OpenSSL tools I use with Dolphin,
specifically the part the builds self-signed certificates.  In short,
I
found recent versions of OpenSSL unbuildable with MinGW (please feel
encouraged to prove me wrong on this one!), and the pre-built
openssl.exe I found did not work properly on Win32.  Since Apache now
ships with mod_ssl and OpenSSL libraries, all I needed was a working
openssl.exe.  The Penguin to the rescue, so I altered the certificate
factory to write a shell script; it could be integrated with OS
Process
to "just do it."

Not fully tested yet, I also added some things to get Squeak/Pharo
running as a service on Windows via the resource kit tools.  So far,
the service starts and then stops; advice on debugging that would be
appreciated.

Configuring Apache is still something of a mystery to me.   I am
content with having everything transported by SSL, and to force the
use
of the correct URLs (at least for now).  Below please find some sample
output from my evolving tool. The goal is to generate a nearly correct
configuration based on the local host and registered Seaside
applications.  It found more than shown below, but please have a look
at
it to see if I am a mockery of the location statements.

If something usable results from this, I will make it available.

Bill



# Apache-related concepts herein were shamelessly stolen from sources
including:
#
http://lists.squeakfoundation.org/pipermail/seaside/2007-November/015181.html


# http://leftshore.files.wordpress.com/2006/10/apacheandseaside.txt 


Listen 443

SSLEngine On
SSLCertificateFile conf/ssl/wherever.cert
SSLCertificateKeyFile conf/ssl/wherever.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

ProxyRequests Off
ProxyPreserveHost On

<Proxy *>
        Order deny,allow
        Allow from none
</Proxy>

<Location /seaside/bibtex>
        Order deny,allow
        Allow from all
        ProxyPass http://localhost:8080/seaside/bibtex 
        ProxyPassReverse http://localhost:8080/seaside/bibtex 
</Location>

<Location /seaside/browse>
        Order deny,allow
        Allow from all
        ProxyPass http://localhost:8080/seaside/browse 
        ProxyPassReverse http://localhost:8080/seaside/browse 
</Location>

<Location /seaside/examples/counter>
        Order deny,allow
        Allow from all
        ProxyPass http://localhost:8080/seaside/examples/counter 
        ProxyPassReverse http://localhost:8080/seaside/examples/counter


</Location>







Wilhelm K. Schwab, Ph.D.
University of Florida
Department of Anesthesiology
PO Box 100254
Gainesville, FL 32610-0254

Email: [hidden email]
Tel: (352) 273-6785
FAX: (352) 392-7029

_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside
Reply | Threaded
Open this post in threaded view
|

Re: Seaside and Apache

Philippe Marschall
2008/10/8, Bill Schwab <[hidden email]>:
> Hello all,
>
> After a few days of getting almost nothing (even in logs, which was
> driving me nuts), I tried a different approach and had a self-signed
> https Apache proxying Seaside.

Beware of self-signed certificates. Firefox 3 and IE 7 go to great
lengths preventing you to use them.

Cheers
Philippe
_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside