Re: Encripted web pages
"Edward Bosco" <[email protected]> Mon, 15 Jan 2007 20:42:40 -0500
| Newsgroups | gmane.org.user-groups.linux.morlug |
|---|---|
| Message-ID | <[email protected]> |
--===============1177502115== Content-Type: multipart/alternative; boundary="----=_Part_69475_2518863.1168911760776" ------=_Part_69475_2518863.1168911760776 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Andrei - What distribution and version are you using? On 1/15/07, Andrei Smirnov <[email protected]> wrote: > > Thanks for all your hints. They helped me to get a better picture about > SSL and certification. > > My problem with encrypted web pages was simpler solved than I thought. It > turns out that as long as I don't care to certify who I am, and only want my > web-server to use encryption when serving the web-pages I just need to ask > the viewer to use https:// instead of http:// in the URL. > > But I still have an important question: how do I make it impossible to use > the insecure 'http://' on those web pages which I only want to be accessed > via SSL? Say it's sensitive documents, and I password protected the > web-page, but now I want to make sure that those with the access can only > view the pages using SSL. > Currently, a user can forget to enter 'https://' and can use just > 'http://', and the page will still be served insecurely. I looked at > http.conf settings, but could not see such an option right away. Maybe I > missed something? > > Andrei > > > > On 1/6/07, David Krovich <[email protected]> wrote: > > > > Andrei, > > > > I recommend looking into http://www.cacert.org. > > > > -Dave > > > > Andrei Smirnov wrote: > > > On 11/2/06, *Jimi Kimble* <[email protected] > > > <mailto:[email protected]>> wrote: > > > > > > I assume you want to use openssl, so I googled openssl and apache > > > and got this walk through: > > > http://www.unixcities.com/apache-openssl/index.html > > > > > > > > > Thanks Jimi for the link. I finally started to get serious about > > > implementing the SSL on my apache server. > > > After reading your link I stumbled on these two lines: > > > > > > SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt > > > SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key > > > > > > How do I get these two files? > > > I remember we once performed some sort of ritual at Morlug of signing > > > digital certificates or similar. Was that the occasion when I was > > > supposed to > > > obtain those files? Even if I did, I must have lost them by now. > > > Any help would be appreciated. > > > > > > Andrei > > > > > > On 11/1/06, *Andrei Smirnov* < [email protected] > > > <mailto:[email protected]>> wrote: > > > > > > I wonder if anyone can give me a brief howto on how to setup > > an > > > encripted web-page using Apache? > > > I have a linux web-server running Apache of course, and now I > > > need to > > > exchange confidential patent material with my attorney. I > > > thought of > > > doing it using the SSL protocol, like they use in web commerce > > for > > > credit card transactions etc. But how do I set it up? I > > presume it > > > should be easy. > > > > > > Thanks in advance, > > > > > > Andrei > > > > > > -- > > > Andrei V. Smirnov, PhD. > > > http://smirnov.mae.wvu.edu > > > MulPhys.com > > > _______________________________________________ > > > Morlug mailing list > > > Morlug @mailman.morlug.org <mailto: [email protected]> > > > http://mailman.morlug.org/mailman/listinfo/ morlug > > > < http://mailman.morlug.org/mailman/listinfo/morlug> > > > > > > > > > > > > > > > -- > > > ph: 304.284.0688 > > > cell 304.290.7245 > > > AIM, MSN, gtalk : jimikimble > > > yahoo : xnebox > > > http://resumes.hotjobs.com/xnebox/jameskimble > > > http://jimikimble.blogspot.com > > > > > > > > > > > > > > > -- > > > Andrei V. Smirnov, PhD. > > > http://smirnov.mae.wvu.edu > > > MulPhys.com > > > +1 304 293 3111 x2345 (w) > > > > > ------------------------------------------------------------------------ > > > > > > _______________________________________________ > > > Morlug mailing list > > > [email protected] > > > http://mailman.morlug.org/mailman/listinfo/morlug > > > > > > > > > > -- > Andrei V. Smirnov, PhD. > http://smirnov.mae.wvu.edu > MulPhys.com > +1 304 293 3111 x2345 (w) > > _______________________________________________ > Morlug mailing list > [email protected] > http://mailman.morlug.org/mailman/listinfo/morlug > > > ------=_Part_69475_2518863.1168911760776 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Andrei -<br><br>What distribution and version are you using?<br><br><div><span class="gmail_quote">On 1/15/07, <b class="gmail_sendername">Andrei Smirnov</b> <<a href="mailto:[email protected]">[email protected] </a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Thanks for all your hints. They helped me to get a better picture about SSL and certification. <br> <br> My problem with encrypted web pages was simpler solved than I thought. It turns out that as long as I don't care to certify who I am, and only want my web-server to use encryption when serving the web-pages I just need to ask the viewer to use https:// instead of http:// in the URL.<br> <br> But I still have an important question: how do I make it impossible to use the insecure 'http://' on those web pages which I only want to be accessed via SSL? Say it's sensitive documents, and I password protected the web-page, but now I want to make sure that those with the access can only view the pages using SSL.<br> Currently, a user can forget to enter 'https://' and can use just 'http://', and the page will still be served insecurely. I looked at http.conf settings, but could not see such an option right away. Maybe I missed something?<br><span class="sg"> <br> Andrei</span><div><span class="e" id="q_1102884880292d69_2"><br> <br> <br><br><div><span class="gmail_quote">On 1/6/07, <b class="gmail_sendername">David Krovich</b> <<a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">[email protected] </a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Andrei,<br><br>I recommend looking into <a href="http://www.cacert.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.cacert.org</a>.<br><br>-Dave<br><br>Andrei Smirnov wrote:<br>> On 11/2/06, *Jimi Kimble* < <a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">[email protected] </a><br>> <mailto:<a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">[email protected]</a>>> wrote:<br>><br>> I assume you want to use openssl, so I googled openssl and apache <br>> and got this walk through: <br>> <a href="http://www.unixcities.com/apache-openssl/index.html" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://www.unixcities.com/apache-openssl/index.html</a><br>><br>><br> > Thanks Jimi for the link. I finally started to get serious about<br> > implementing the SSL on my apache server.<br>> After reading your link I stumbled on these two lines:<br>><br>> SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt<br>> SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key <br>><br>> How do I get these two files?<br>> I remember we once performed some sort of ritual at Morlug of signing<br>> digital certificates or similar. Was that the occasion when I was<br>> supposed to<br> > obtain those files? Even if I did, I must have lost them by now.<br>> Any help would be appreciated.<br>><br>> Andrei<br>><br>> On 11/1/06, *Andrei Smirnov* < <a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> [email protected]</a><br>> <mailto:<a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">[email protected]</a>>> wrote:<br>> <br>> I wonder if anyone can give me a brief howto on how to setup an <br>> encripted web-page using Apache?<br>> I have a linux web-server running Apache of course, and now I<br>> need to<br>> exchange confidential patent material with my attorney. I <br>> thought of<br>> doing it using the SSL protocol, like they use in web commerce for<br>> credit card transactions etc. But how do I set it up? I presume it<br>> should be easy. <br>><br>> Thanks in advance,<br>><br>> Andrei<br>><br>> --<br>> Andrei V. Smirnov, PhD.<br>> <a href="http://smirnov.mae.wvu.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> http://smirnov.mae.wvu.edu </a><br>> MulPhys.com<br>> _______________________________________________<br>> Morlug mailing list<br>> Morlug @<a href="http://mailman.morlug.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> mailman.morlug.org</a> <mailto: <a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">[email protected]</a>><br>> <a href="http://mailman.morlug.org/mailman/listinfo/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> http://mailman.morlug.org/mailman/listinfo/</a> morlug<br>> < <a href="http://mailman.morlug.org/mailman/listinfo/morlug" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://mailman.morlug.org/mailman/listinfo/morlug</a>><br>><br>><br>><br>> <br>> --<br>> ph: 304.284.0688<br>> cell 304.290.7245 <br>> AIM, MSN, gtalk : jimikimble<br>> yahoo : xnebox<br>> <a href="http://resumes.hotjobs.com/xnebox/jameskimble" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://resumes.hotjobs.com/xnebox/jameskimble </a><br>> <a href="http://jimikimble.blogspot.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> http://jimikimble.blogspot.com</a><br>><br>><br>><br>><br>> --<br>> Andrei V. Smirnov, PhD.<br>> <a href="http://smirnov.mae.wvu.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> http://smirnov.mae.wvu.edu</a><br>> MulPhys.com<br>> +1 304 293 3111 x2345 (w) <br>> ------------------------------------------------------------------------<br>><br>> _______________________________________________<br>> Morlug mailing list<br>> <a href="mailto:[email protected]" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> [email protected]</a><br>> <a href="http://mailman.morlug.org/mailman/listinfo/morlug" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://mailman.morlug.org/mailman/listinfo/morlug</a> <br>><br><br></blockquote></div><br><br clear="all"><br>-- <br>Andrei V. Smirnov, PhD. <br><a href="http://smirnov.mae.wvu.edu" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://smirnov.mae.wvu.edu</a><br>MulPhys.com<br>+1 304 293 3111 x2345 (w) </span></div><br>_______________________________________________<br>Morlug mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:[email protected]">[email protected]</a><br> <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://mailman.morlug.org/mailman/listinfo/morlug" target="_blank">http://mailman.morlug.org/mailman/listinfo/morlug</a><br><br><br></blockquote></div><br> ------=_Part_69475_2518863.1168911760776-- --===============1177502115== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Morlug mailing list [email protected] http://mailman.morlug.org/mailman/listinfo/morlug --===============1177502115==--