[opencms-dev] SSL for workplace

[Christian Steinert]

Christian Steinert schrieb:
> Hi List,
>
> I have searched for information about securing the workplace (but only
> the workplace) with SSL, yet I did not found any solutions.
> If I remember correctly then with opencms5 there was a property-setting
> to disallow unencrypted workplace login. But I have not found such a
> setting anymore with opencms 6.
>
> How can I:
> 1. block workplace logins over unencryped http
> 2. still allow http for viewing the site through the same servlet context
>
> ___
>
> Is there any way to do this (at best without resorting to proxying)?
>
> thanks a lot
> christian
>
>   
Ok, I think I have found out. It seems to be enough to set the workplace
URL in opencms-system.xml so that it begins with https://
If one does that, then all login attempts will be redirected to the SSL
connection.

christian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3269 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://webmail.opencms.org/pipermail/opencms-dev/attachments/20061014/b0bd629f/attachment.bin>