[rt-users] HTTP and HTTPS on same RT server?

[Matt Westfall]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Umm, SSL Certs are $20 a year, lol


Matt Westfall
Owner / Operator
FiftyPounds Internet
http://www.fiftypounds.com

This message is digitally signed with Pretty Good Privacy (PGP)
Info: http://en.wikipedia.org/wiki/Pretty_Good_Privacy



Lutz Jaenicke wrote:
| Danie Marais wrote:
|>
|>
|>>> Can someone perhaps just confirm that an HTTP and HTTPS
|>>>
|>> combination is
|>>
|>>> not possible?
|>>>
|>>> Thanks
|>>>
|>
|>> I don't see why it wouldn't be possible. You can have both an HTTP and
|>> an HTTPS site serving the same pages, and then redirect people between
|>> the two based on certain conditions, probably logged in user, or even
|>> based on a custom field.
|>>
|>> Is there any reason why you don't want to use HTTPS for both
|>> SelfService
|>> users and engineers?
|>>
|> I'm not keen to buy an expensive web certificate.  SelfService does not
|> warrant that level of security, but engineers can be instructed to import
|> the web certificate.  And HTTP requires slightly less resources.
|>
|> My current problem is that by correctly setting the WebBaseURL in
|> RT_SiteConfig.pm to http or https I can get either one of the two working
|> but not both at the same time.  If http is specified then you cannot
submit
|> replies in https and vice versa.
|>
|>
| For rt.openssl.org the problem is "solved" by having a separate Apache
| instance just running RT on some internal port number and then let the
| frontend Apache handle the http/https protocols.
|
| <VirtualHost 195.30.6.166:80>
|     #   server information
|     ServerName        rt.openssl.org
|     ServerAlias       rt.openssl.org
|     ServerAdmin       openssl-team at openssl.org
|     ServerSignature   on
|     UseCanonicalName  on
|     ProxyPass         / http://195.30.6.166:abcd/
|     ProxyPassReverse  / http://195.30.6.166:abcd/
| </VirtualHost>
|
| <VirtualHost 195.30.6.166:443>
|     #   server information
|     ServerName        rt.openssl.org
|     ServerAlias       rt.openssl.org
|     ServerAdmin       openssl-team at openssl.org
|     ServerSignature   on
|     UseCanonicalName  on
|     ProxyPass         / http://195.30.6.166:abcd/
|     ProxyPassReverse  / http://195.30.6.166:abcd/
| </VirtualHost>
|
|
| So far I have not seen any malfunction.
|
| Best regards,
|     Lutz
| _______________________________________________
| http://lists.bestpractical.com/cgi-bin/mailman/listinfo/rt-users
|
| Community help: http://wiki.bestpractical.com
| Commercial support: sales at bestpractical.com
|
|
| Discover RT's hidden secrets with RT Essentials from O'Reilly Media.
| Buy a copy at http://rtbook.bestpractical.com

- --
Matt Westfall
Owner / Operator
FiftyPounds Internet
http://www.fiftypounds.com

This message is digitally signed with Pretty Good Privacy (PGP)
Info: http://en.wikipedia.org/wiki/Pretty_Good_Privacy

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHxBp6b/8X6V5MpAURAm08AJ9tcpPZ+UU8/ey0WntWb/0/NXLaxgCdEwMe
k/JX7Kh++QtXokZYpkSVlJk=
=Nkl9
-----END PGP SIGNATURE-----