Hello all,
After a few days of getting almost nothing (even in logs, which was driving me nuts), I tried a different approach and had a self-signed https Apache proxying Seaside. I will start to congratulate myself when I can reproduce it. Toward that end, I have been writing some truly ugly code to capture how to do some things. First, I have ported part of some OpenSSL tools I use with Dolphin, specifically the part the builds self-signed certificates. In short, I found recent versions of OpenSSL unbuildable with MinGW (please feel encouraged to prove me wrong on this one!), and the pre-built openssl.exe I found did not work properly on Win32. Since Apache now ships with mod_ssl and OpenSSL libraries, all I needed was a working openssl.exe. The Penguin to the rescue, so I altered the certificate factory to write a shell script; it could be integrated with OS Process to "just do it." Not fully tested yet, I also added some things to get Squeak/Pharo running as a service on Windows via the resource kit tools. So far, the service starts and then stops; advice on debugging that would be appreciated. Configuring Apache is still something of a mystery to me. I am content with having everything transported by SSL, and to force the use of the correct URLs (at least for now). Below please find some sample output from my evolving tool. The goal is to generate a nearly correct configuration based on the local host and registered Seaside applications. It found more than shown below, but please have a look at it to see if I am a mockery of the location statements. If something usable results from this, I will make it available. Bill # Apache-related concepts herein were shamelessly stolen from sources including: # http://lists.squeakfoundation.org/pipermail/seaside/2007-November/015181.html # http://leftshore.files.wordpress.com/2006/10/apacheandseaside.txt Listen 443 SSLEngine On SSLCertificateFile conf/ssl/wherever.cert SSLCertificateKeyFile conf/ssl/wherever.key SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown ProxyRequests Off ProxyPreserveHost On <Proxy *> Order deny,allow Allow from none </Proxy> <Location /seaside/bibtex> Order deny,allow Allow from all ProxyPass http://localhost:8080/seaside/bibtex ProxyPassReverse http://localhost:8080/seaside/bibtex </Location> <Location /seaside/browse> Order deny,allow Allow from all ProxyPass http://localhost:8080/seaside/browse ProxyPassReverse http://localhost:8080/seaside/browse </Location> <Location /seaside/examples/counter> Order deny,allow Allow from all ProxyPass http://localhost:8080/seaside/examples/counter ProxyPassReverse http://localhost:8080/seaside/examples/counter </Location> Wilhelm K. Schwab, Ph.D. University of Florida Department of Anesthesiology PO Box 100254 Gainesville, FL 32610-0254 Email: [hidden email] Tel: (352) 273-6785 FAX: (352) 392-7029 _______________________________________________ seaside mailing list [hidden email] http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside |
2008/10/8, Bill Schwab <[hidden email]>:
> Hello all, > > After a few days of getting almost nothing (even in logs, which was > driving me nuts), I tried a different approach and had a self-signed > https Apache proxying Seaside. Beware of self-signed certificates. Firefox 3 and IE 7 go to great lengths preventing you to use them. Cheers Philippe _______________________________________________ seaside mailing list [hidden email] http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside |
Free forum by Nabble | Edit this page |