> I know, that Tiki can be configured for "https" / "SSL"
> As I have only one certificate, I do not really want to afford another
> one and this site is not my personal one, I want to configure Tiki for a
> ssl-proxy / https-proxy
> I tried and got some problems -> now, before I dig deeper in the doc the
> Does anybody know, if https-proxy positively works in general with Tiki
> or negatively ;-) does it not work?
No, I did not try it yet. What I can confirm is that tiki works with a
complex proxy setup consisting of DansGuardian (doing content filtering)
and SQUID (chaching). But a SSL proxy should react like any "normal"
reverse proxy. So, the requirements for a proxy (SSL or not) are
- No manipulation to the URL
- Handles cookies (Pass through)
Requirement for tiki:
- No absolute URLs in links etc (as they would bypass the proxy)
Maybe we could chat some time today or tomorrow to work things out
together (and you'll write a blog entry "How to set up a SSL proxy for
Tiki with my provider" and become famous)
> The use of the proxy at my particular provider would be:
> https://ssl-account.com/mydomain.com/Pagename >
> I am not asking for a complete solution (even appreceating such), but
> just want to kow, if it would be worth to take the time to go through
> every docs I will find.
> => The provider told me that several https-capable cms systems would
> work with a personal certificate, but some not with https-proxy.
Well, what does the http proxy do?
Basically, it accepts incoming encrypted (https) connections to its URL
https://ssl-account.com/mydomain.com/Pagename. Then it parses and
rewrites its URL to something like http://mydomain.com/Pagename and
fetches data from that URL. Then it forwards the page to its
destination. Some sophisticated Proxies like Dansguardian parse the
pages and change the content (URL-Rewriting) or refuse delivery based on
content (PICS rating, keywords etc).
It gets complicated when you have embedded java applets (dunno about M$
activeX containers), as they are only allowed to communicate back with
the server they were downloaded from (and thats the proxy, not your
machine which actually can handle those requests).
Jörn Ott Telefon: (0 22 24) 94 08 - 73
EDV Service & Beratung Telefax: (0 22 24) 94 08 -74
Hauptstr. 11e E-Mail: mailto:white@... 53604 Bad Honnef WWW: http://www.ott-service.de/