Question #3486: Why doesn't the Rudder webapp use https instead of http? - Rudder - Issue Tracker

Actions

#1

Updated by Matthieu CERDA about 11 years ago

Tracker changed from Question to User story
Project changed from Rudder to 34
Status changed from New to 8
Assignee set to Jonathan CLARKE
Priority changed from N/A to 4
Target version set to 2.6.0~rc1

Well, simply because we did not bundle an Apache configuration to do it, but I agree that this is a very common use case (actually, nearly everyone using Rudder in production uses HTTP/S), so we should enable HTTP/S in the base installation as well :)

Actions

Copy link

#2

Updated by Matthieu CERDA about 11 years ago

Assignee changed from Jonathan CLARKE to Matthieu CERDA

Actions

Copy link

#3

Updated by Matthieu CERDA about 11 years ago

Target version changed from 2.6.0~rc1 to 2.6.0

Actions

Copy link

#4

Updated by Jonathan CLARKE almost 11 years ago

Target version changed from 2.6.0 to 2.6.1

Actions

Copy link

#5

Updated by Nicolas PERRON almost 11 years ago

Target version changed from 2.6.1 to 2.6.2

Actions

Copy link

#6

Updated by Nicolas PERRON almost 11 years ago

Target version changed from 2.6.2 to 2.6.3

Actions

Copy link

#7

Updated by Dennis Cabooter almost 11 years ago

Proposal:

- Change /etc/apache2/sites-enabled/rudder-default to /etc/apache2/sites-enabled/rudder-ssl

- Edit /etc/apache2/sites-enabled/rudder-ssl

#<VirtualHost *:80>
<VirtualHost *:443>
        ServerAdmin webmaster@localhost

        SSLEngine on
        SSLCertificateFile /etc/ssl/certs/server.crt
        SSLCertificateKeyFile /etc/ssl/private/server.key

- Create /etc/apache2/sites-enabled/rudder-default

<VirtualHost *:80>
  ServerName rudder
  Redirect permanent / https://rudder/
</VirtualHost>

Actions

Copy link

#8

Updated by Dennis Cabooter almost 11 years ago

For the certificates, you can use:

- a self-signed certificate, generated by Normation
- a machine provided snakeoil certificate, and then advise the user to possibly replace it with their own (self-signed) certificate

Actions

Copy link

#9