« Return to Thread: [Tiki-devel] secure Tiki with https-Proxy?
Re: [Tiki-devel] secure Tiki with https-Proxy?
by Jörn Ott
::
Rate this Message:
Hello Torsten,
Am 09.03.2012 16:22, schrieb Torsten Fabricius:
> Hi
>
> I know, that Tiki can be configured for "https" / "SSL"
>
> As I have only one certificate, I do not really want to afford another
> one and this site is not my personal one, I want to configure Tiki for a
> ssl-proxy / https-proxy
>
> I tried and got some problems -> now, before I dig deeper in the doc the
> question:
>
> Does anybody know, if https-proxy positively works in general with Tiki
> or negatively ;-) does it not work?
No, I did not try it yet. What I can confirm is that tiki works with a
complex proxy setup consisting of DansGuardian (doing content filtering)
and SQUID (chaching). But a SSL proxy should react like any "normal"
reverse proxy. So, the requirements for a proxy (SSL or not) are
relatively simple:
- No manipulation to the URL
- Handles cookies (Pass through)
Requirement for tiki:
- No absolute URLs in links etc (as they would bypass the proxy)
Maybe we could chat some time today or tomorrow to work things out
together (and you'll write a blog entry "How to set up a SSL proxy for
Tiki with my provider" and become famous)
>
> The use of the proxy at my particular provider would be:
> https://ssl-account.com/mydomain.com/Pagename
>
> I am not asking for a complete solution (even appreceating such), but
> just want to kow, if it would be worth to take the time to go through
> every docs I will find.
> => The provider told me that several https-capable cms systems would
> work with a personal certificate, but some not with https-proxy.
Well, what does the http proxy do?
Basically, it accepts incoming encrypted (https) connections to its URL
https://ssl-account.com/mydomain.com/Pagename. Then it parses and
rewrites its URL to something like http://mydomain.com/Pagename and
fetches data from that URL. Then it forwards the page to its
destination. Some sophisticated Proxies like Dansguardian parse the
pages and change the content (URL-Rewriting) or refuse delivery based on
content (PICS rating, keywords etc).
It gets complicated when you have embedded java applets (dunno about M$
activeX containers), as they are only allowed to communicate back with
the server they were downloaded from (and thats the proxy, not your
machine which actually can handle those requests).
>
> Thx
>
> --ToF
>
KR
Jörn Ott
--
------------------------------------------------------------
Jörn Ott Telefon: (0 22 24) 94 08 - 73
EDV Service & Beratung Telefax: (0 22 24) 94 08 -74
Hauptstr. 11e E-Mail: mailto:white@...
53604 Bad Honnef WWW: http://www.ott-service.de/
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
TikiWiki-devel mailing list
TikiWiki-devel@...
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
Am 09.03.2012 16:22, schrieb Torsten Fabricius:
> Hi
>
> I know, that Tiki can be configured for "https" / "SSL"
>
> As I have only one certificate, I do not really want to afford another
> one and this site is not my personal one, I want to configure Tiki for a
> ssl-proxy / https-proxy
>
> I tried and got some problems -> now, before I dig deeper in the doc the
> question:
>
> Does anybody know, if https-proxy positively works in general with Tiki
> or negatively ;-) does it not work?
No, I did not try it yet. What I can confirm is that tiki works with a
complex proxy setup consisting of DansGuardian (doing content filtering)
and SQUID (chaching). But a SSL proxy should react like any "normal"
reverse proxy. So, the requirements for a proxy (SSL or not) are
relatively simple:
- No manipulation to the URL
- Handles cookies (Pass through)
Requirement for tiki:
- No absolute URLs in links etc (as they would bypass the proxy)
Maybe we could chat some time today or tomorrow to work things out
together (and you'll write a blog entry "How to set up a SSL proxy for
Tiki with my provider" and become famous)
>
> The use of the proxy at my particular provider would be:
> https://ssl-account.com/mydomain.com/Pagename
>
> I am not asking for a complete solution (even appreceating such), but
> just want to kow, if it would be worth to take the time to go through
> every docs I will find.
> => The provider told me that several https-capable cms systems would
> work with a personal certificate, but some not with https-proxy.
Well, what does the http proxy do?
Basically, it accepts incoming encrypted (https) connections to its URL
https://ssl-account.com/mydomain.com/Pagename. Then it parses and
rewrites its URL to something like http://mydomain.com/Pagename and
fetches data from that URL. Then it forwards the page to its
destination. Some sophisticated Proxies like Dansguardian parse the
pages and change the content (URL-Rewriting) or refuse delivery based on
content (PICS rating, keywords etc).
It gets complicated when you have embedded java applets (dunno about M$
activeX containers), as they are only allowed to communicate back with
the server they were downloaded from (and thats the proxy, not your
machine which actually can handle those requests).
>
> Thx
>
> --ToF
>
KR
Jörn Ott
--
------------------------------------------------------------
Jörn Ott Telefon: (0 22 24) 94 08 - 73
EDV Service & Beratung Telefax: (0 22 24) 94 08 -74
Hauptstr. 11e E-Mail: mailto:white@...
53604 Bad Honnef WWW: http://www.ott-service.de/
------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
TikiWiki-devel mailing list
TikiWiki-devel@...
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
« Return to Thread: [Tiki-devel] secure Tiki with https-Proxy?
| Free embeddable forum powered by Nabble | Forum Help |
