[opencms-dev] mod_proxy
Bernd Wolfsegger
bw at code-create.com
Mon May 23 16:52:13 CEST 2005
Arash,
On Monday 23 May 2005 13:02, ark-d at betasystems.com wrote:
> Bernd,
>
> I use a simplified templateone form module and mod_proxy and mod_rewrite
> without installing opencms as ROOT on my private site and have serveral
> other Installations for Intranet and Internet at work with mod_jk 1.2.x ,
> because of LoadBalancing, Clustering, ease of use, etc. So I think mod_jk
> is the right solution for high performance and for multisite solutions.
Perhaps there is something wrong with that form module, because why does it
only work with SSL?
But you said you use mod_jk. So where do you use the normal HTTP Connector
below? Or do you use it only for the form posting and mod_jk for the rest?
Just interested.
And you can't use self signed certificates for official websites, because the
user will always be prompted for a not trust worthy certificate.
If submitting your form just then change to a SSL connection and the form
itself was requested with a "normal" connection and you get this SSL popup
and accept, the formdata will not be transmitted too.
Kind regards, Bernd
>
> > I can not afford a certificate right now
>
> I'm using a self signed and require ssl connection for the workplace like
> this:
>
> Create Self signed Certifcate:
>
> keytool -genkey -alias tomcat -keyalg RSA -keystore /path/to/.keystore
> -validity 365
>
> keytool -export -alias tomcat -file /path/to/tomcat-server.crt -keystore
> /path/to/.keystore
>
> keytool -import -file /path/to/tomcat-server.crt -keystore /path/to/cacerts
>
> server.xml settings:
>
> <!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
> <!-- Commnet out from server.xml-->
> <Connector port="8443"
> maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
> enableLookups="false" disableUploadTimeout="true"
> acceptCount="100" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS"
> keystoreFile="/path/to/.keystore"
> keystorePass="secret" truststoreFile="/path/to/cacerts"
> />
>
> Require ssl access for the workplace:
>
> paste into web.xml of opencms
>
> <security-constraint>
> <web-resource-collection>
> <web-resource-name>OpenCmsServlet</web-resource-name>
> <url-pattern>/system/*</url-pattern>
> <http-method>GET</http-method>
> <http-method>POST</http-method>
> </web-resource-collection>
>
> <user-data-constraint>
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> </user-data-constraint>
> </security-constraint>
>
> > And how do you process the data?
>
> via the post method.
>
> Regards,
> Arash
>
>
>
>
>
>
>
>
> Bernd Wolfsegger
> <bw at code-create.c
> om> To
> Sent by: <opencms-dev at opencms.org>
> opencms-dev-bounc cc
> es at opencms.org
> Subject
> Re: [opencms-dev] mod_proxy
> 23.05.2005 12:02
>
>
> Please respond to
> Bernd Wolfsegger
> <bw at code-create.c
> om>; Please
> respond to
> The OpenCms
> mailing list
> <opencms-dev at open
> cms.org>
>
>
>
>
>
>
> Arash,
>
> well, I also have a form on my site and I have no problems sending and
> receiving the data and I use mod_proxy/ROOT webapp etc. too, but no mod_jk.
> And I do not use https because I can not afford a certificate right now.
> But
> it would be better to have one for transmitting form data :). So what kind
> of
> form do you have? Is it a special OpenCms templateone thing or a self
> build.
> And how do you process the data?
>
> Kind Regards, Bernd
>
> On Monday 23 May 2005 11:11, ark-d at betasystems.com wrote:
> > Bernd Wolfsegger wrote:
> > > The problem ist not mod_proxy, it is the mod_alias Redirect, because it
> >
> > does
> >
> > > not redirect form data.
> >
> > Bernd,
> >
> > thanks for the hint, but I don't have mod_alias activated and the form
>
> data
>
> > didn't got redirected.
> > As I wrote in my previous email, it works with secure access via
> > https://myserver/opencms/opencms/en/emailform.
> >
> > Regards,
> > Arash
> >
> > opencms-dev-bounces at opencms.org wrote on 23.05.2005 08:40:13:
> > > On Sunday 22 May 2005 22:47, Patrick Donker wrote:
> > > > Arash Kaffamanesh wrote:
> > > > >Yes it does the redirection from apache to tomcat. You don't need to
> > > > >install it as ROOT app. But my opinion is for setting up mutltisite
> > > > >installation it is better to have one tomcat installation with
> >
> > serveral
> >
> > > > >container instances, which can be started indepedently.
> > > >
> > > > So basically you are saying that in general it is better to have it
> > > > installed as a Root app? Or is it just the other way around ;)? I'm a
> > > > bit confused on what a Root app does to begin with.
> > >
> > > As far as I know the only difference is, that the ROOT webapp has no
> >
> > "name"
> >
> > > and so you do not need to "name" it in the URL. like other apps.
> > >
> > > > >The mod_proxy approach has some problems with posting forms I think
> >
> > and
> >
> > > > >therfore is not included in beta3 or the latest CVS HEAD. Installing
> > > > >opencms as ROOT had some problems with connecting via https to the
> > > > >workplace, at least by me.
> > > >
> > > > Hmmm...that could become a problem as many sites have forms.
> > >
> > > The problem ist not mod_proxy, it is the mod_alias Redirect, because it
> >
> > does
> >
> > > not redirect form data.
> > >
> > > > >I'm going to test mod_jk 1.2 and mod_rewrite with tomcat 5.5.9
> >
> > tomorrow,
> >
> > > > >perhaps it solves my problem with contact form fuctionality in
>
> online
>
> > > > >mode.
> > > >
> > > > Keep me informed. I'd like to hear your experiences on this as I am
>
> new
>
> > > > to Opencms.
> > > >
> > > > Thanks
> > > > -Patrick
> > > >
> > > >
> > > > _______________________________________________
> > > > This mail is send to you from the opencms-dev mailing list
> > > > To change your list options, or to unsubscribe from the list, please
> >
> > visit
> >
> > > > http://mail.opencms.org/mailman/listinfo/opencms-dev
> > >
> > > --
> > >
> > > [ Code Create
> > > [ Web Content Management and Presentation
> > >
> > >
> > > [ Bernd Wolfsegger
> > > [ Sun Certified Programmer for Java(TM) 2 Platform
> > >
> > >
> > > [ Office in Germany
> > > [
> > > [ Lohmeyerstrasse 13
> > > [ 10587 Berlin
> > > [ Germany
> > > [ Fon +49 (0)30 26555788
> > > [ Fax +49 (0)30 2651835
> > >
> > > [ Office in Kenya
> > > [
> > > [ P.O. Box 890
> > > [ V/Market
> > > [ 00621 Nairobi
> > > [ Kenya
> > > [ Mobile +254 (0)720 481053
> > >
> > > [ bw at code-create.com
> > > [ http://www.code-create.com/
> > >
> > >
> > >
> > > _______________________________________________
> > > This mail is send to you from the opencms-dev mailing list
> > > To change your list options, or to unsubscribe from the list, please
> >
> > visit
> >
> > > http://mail.opencms.org/mailman/listinfo/opencms-dev
>
> --
>
> [ Code Create
> [ Web Content Management and Presentation
>
>
> [ Bernd Wolfsegger
> [ Sun Certified Programmer for Java(TM) 2 Platform
>
>
> [ Office in Germany
> [
> [ Lohmeyerstrasse 13
> [ 10587 Berlin
> [ Germany
> [ Fon +49 (0)30 26555788
> [ Fax +49 (0)30 2651835
>
> [ Office in Kenya
> [
> [ P.O. Box 890
> [ V/Market
> [ 00621 Nairobi
> [ Kenya
> [ Mobile +254 (0)720 481053
>
> [ bw at code-create.com
> [ http://www.code-create.com/
>
>
>
> _______________________________________________
> This mail is send to you from the opencms-dev mailing list
> To change your list options, or to unsubscribe from the list, please visit
> http://mail.opencms.org/mailman/listinfo/opencms-dev
--
[ Code Create
[ Web Content Management and Presentation
[ Bernd Wolfsegger
[ Sun Certified Programmer for Java(TM) 2 Platform
[ Office in Germany
[
[ Lohmeyerstrasse 13
[ 10587 Berlin
[ Germany
[ Fon +49 (0)30 26555788
[ Fax +49 (0)30 2651835
[ Office in Kenya
[
[ P.O. Box 890
[ V/Market
[ 00621 Nairobi
[ Kenya
[ Mobile +254 (0)720 481053
[ bw at code-create.com
[ http://www.code-create.com/
More information about the opencms-dev
mailing list