running seaside behind ssl

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

running seaside behind ssl

sergio_101

just a quick question about running seaside.. i have very limited experience running sites with ssl..

if i use apache with ssl in front of seaside, is there anything i need to set up differently, or will the requests to seaside just run normally, with apache handling the details?


_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside
Reply | Threaded
Open this post in threaded view
|

Re: running seaside behind ssl

Sven Van Caekenberghe-2
Sergio,

On 26 Jun 2013, at 14:23, sergio_101 <[hidden email]> wrote:

>
> just a quick question about running seaside.. i have very limited experience running sites with ssl..
>
> if i use apache with ssl in front of seaside, is there anything i need to set up differently, or will the requests to seaside just run normally, with apache handling the details?

Yes, just proxy your seaside app with apache or nginx, with or without ssl. For seaside it should make no difference.

You might consider configuring things so that seaside does not talk unencrypted to the outside world, using a firewall, a local binding, or checking headers.

You will notice that some extra HTTP headers are added to each incoming request.

Sven

_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside
Reply | Threaded
Open this post in threaded view
|

Re: running seaside behind ssl

sergio_101
great.. thanks!


On Wed, Jun 26, 2013 at 8:36 AM, Sven Van Caekenberghe <[hidden email]> wrote:
Sergio,

On 26 Jun 2013, at 14:23, sergio_101 <[hidden email]> wrote:

>
> just a quick question about running seaside.. i have very limited experience running sites with ssl..
>
> if i use apache with ssl in front of seaside, is there anything i need to set up differently, or will the requests to seaside just run normally, with apache handling the details?

Yes, just proxy your seaside app with apache or nginx, with or without ssl. For seaside it should make no difference.

You might consider configuring things so that seaside does not talk unencrypted to the outside world, using a firewall, a local binding, or checking headers.

You will notice that some extra HTTP headers are added to each incoming request.

Sven
> _______________________________________________
> seaside mailing list
> [hidden email]
> http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside

_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside



--
----
peace,
sergio
photographer, journalist, visionary

http://www.ThoseOptimizeGuys.com
http://www.CodingForHire.com
http://www.coffee-black.com
http://www.painlessfrugality.com
http://www.twitter.com/sergio_101
http://www.facebook.com/sergio101

_______________________________________________
seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside