Setup SSL only with user login page to secure username and password

Tuesday 11 January 2011 5:28:44 am

If you want to set up https for all of the admin siteaccess and only for part of the public siteaccess, using two vhosts is probably your best bet. You'll also have to buy 2 certs in that case, as you need one separate certificate per hostname.

If you feel like experimenting, you could:

• enable https in apache (set up 2 identical vhosts, one on port 80, one on port 443)
• set up ssl in the site.ini of the two siteaccesses: SSLZones=enabled, SSLSubtrees[]=/, ModuleViewAccessMode[*/*]=ssl for admin and SSLZones=enabled, ModuleViewAccessMode[user/login]=ssl for front

Principal Consultant International Business
Member of the Community Project Board

Saturday 15 January 2011 3:56:00 am

Hi,

I have tried .but some issues in setting http and https in public site access.

I should set up port 80 for http request in public site access with, port 443 for ssl request in user/loginmodule/view in public site access ? So that is it better to put two virtualhost for public site access and 3rd virtualhost for admin site access to listen https request on port 443. Is this is a right way for my requirement. Any suggestions or ideas will be a help.

<b>NameVirtualHost *:443
NameVirtualHost *:80</b>

<b><VirtualHost *:80>
        ServerName public_siteaccess</b>
        DocumentRoot /var/www/
        
</VirtualHost>

<b><VirtualHost *:443>
        ServerName public_siteaccess</b>

        DocumentRoot /var/www/
        

        SSLEngine on
        SSLCertificateFile /etc/apache1/ssl/apache.pem
</VirtualHost>



<b><VirtualHost *:443>
        ServerName admin_siteaccess</b>

        DocumentRoot /var/www/
        

        SSLEngine on
        SSLCertificateFile /etc/apache2/ssl/apache2.pem
</VirtualHost>

Monday 07 March 2011 8:47:34 am

Bump...

No idea?

Cheers

GOOD 4 ALL