Re: [Pound Mailing List] How to publish one page in https, the others in http
Alan McGinlay <alanm-02ecni/[email protected]>
| Newsgroups | gmane.comp.web.pound.general |
|---|---|
| Message-ID | <[email protected]> |
In that case, if you don't want users to be able to browse the rest of the site with SSL enabled (even by their own manual choice) you could redirect them back to the non SSL site (unless the url is the login one.) On fre 28 jun 2013 15:39:52, PIEUX Emmanuel wrote: > Thank you very much for this solution. I will try it as soon as possible. > I'm agree with the fact that full ssl is better (and simpler) than this solution, but I have no choice... > > -----Message d'origine----- > De : Alan McGinlay [mailto:alanm-02ecni/[email protected]] > Envoyé : vendredi 28 juin 2013 15:00 > À : [email protected] > Objet : Re: [Pound Mailing List] How to publish one page in https, the others in http > > Actually, just take out the URL check from the HTTPS listener and it will still work and your users will be able to browse the whole site with SSL if they so desire. Personally, I would just run the whole site behind SSL by default and redirect all non SSL requests to the ssl version. Overhead is minimal to say the least and you get a lot of benefits. It can solve issues of running say Varnish cache in front of drupal not working properly because of ssl as well. > > > On fre 28 jun 2013 14:51:59, Alan McGinlay wrote: >> This should do the trick: >> >> ListenHTTP >> Address IPADDR >> Port 80 >> Service >> HeadRequire "^Host:\s*mywebsite.com.*" >> URL "/Login?user.*" >> Redirect 301 "https://mywebsite.com" >> End >> Service >> HeadRequire "^Host:\s*mywebsite.com.*" >> BackEnd >> Address yournormalbackend >> Port 80 >> End >> End >> End >> ListenHTTPS >> Address IPADDR >> Port 443 >> Cert "/etc/ssl/certs/cert.pem" >> Service >> HeadRequire "^Host:\s*mywebsite.com.*" >> URL "/Login?user.*" >> BackEnd >> Address yournormalbackend >> Port 80 >> End >> End >> End >> >> >> That won't cover users trying to browse the rest of your site with >> https enabled, add another service for that. >> >> >> >> >> On 2013-06-28 14:08, PIEUX Emmanuel wrote: >>> Good morning, >>> >>> I have a website to publish with Pound in http (ie >>> http://mywebsite.com). >>> >>> I’d like the authentication page >>> (http://mywebsite.com/authentication/Login?user) be published in >>> https, and only this page. >>> >>> How could I do that with Pound (and is it possible…)? >>> >>> Sincerely >>> >>> Emmanuel Pieux >>> >>> *cid:[email protected] >>> **Emmanuel PIEUX**– *Responsable de la sécurité des systèmes >>> d’information >>> * >>> *Chambre de Commerce et d'Industrie de Grenoble >>> 1, place André Malraux - BP 297 >>> 38016 GRENOBLE CEDEX 1 >>> T. 04 76 70 64 06 – M. 06 22 96 19 63 >>> **www.grenoble.cci.fr <http://www.grenoble.cci.fr> >>> >> >> -- >> To unsubscribe send an email with subject unsubscribe to [email protected]. >> Please contact [email protected] for questions. > > -- > To unsubscribe send an email with subject unsubscribe to [email protected]. > Please contact [email protected] for questions. > N�����r��zǧu�ޙ���+a���y�n�˛���m�h���u�l��!>W���(�֜��,z��+ ��+�笶*'s=== -- To unsubscribe send an email with subject unsubscribe to [email protected] Please contact [email protected] for questions.