[rt-users] HTTP and HTTPS on same RT server?

[Lutz Jaenicke]

Danie Marais wrote:
>  
>   
>>> Can someone perhaps just confirm that an HTTP and HTTPS 
>>>       
>> combination is
>>     
>>> not possible? 
>>>  
>>> Thanks
>>>       
>
>   
>> I don't see why it wouldn't be possible. You can have both an HTTP and
>> an HTTPS site serving the same pages, and then redirect people between
>> the two based on certain conditions, probably logged in user, or even
>> based on a custom field.
>>
>> Is there any reason why you don't want to use HTTPS for both 
>> SelfService
>> users and engineers?
>>     
>
> I'm not keen to buy an expensive web certificate.  SelfService does not
> warrant that level of security, but engineers can be instructed to import
> the web certificate.  And HTTP requires slightly less resources.
>
> My current problem is that by correctly setting the WebBaseURL in
> RT_SiteConfig.pm to http or https I can get either one of the two working
> but not both at the same time.  If http is specified then you cannot submit
> replies in https and vice versa.
>
>   
For rt.openssl.org the problem is "solved" by having a separate Apache
instance just running RT on some internal port number and then let the
frontend Apache handle the http/https protocols.

<VirtualHost 195.30.6.166:80>
    #   server information
    ServerName        rt.openssl.org
    ServerAlias       rt.openssl.org
    ServerAdmin       openssl-team at openssl.org
    ServerSignature   on
    UseCanonicalName  on
    ProxyPass         / http://195.30.6.166:abcd/
    ProxyPassReverse  / http://195.30.6.166:abcd/
</VirtualHost>

<VirtualHost 195.30.6.166:443>
    #   server information
    ServerName        rt.openssl.org
    ServerAlias       rt.openssl.org
    ServerAdmin       openssl-team at openssl.org
    ServerSignature   on
    UseCanonicalName  on
    ProxyPass         / http://195.30.6.166:abcd/
    ProxyPassReverse  / http://195.30.6.166:abcd/
</VirtualHost>


So far I have not seen any malfunction.

Best regards,
    Lutz