Changes between Version 9 and Version 10 of UbuntuConfiguringApache2ServerSSLProxy

Timestamp:

27.09.2013 18:08:29 (11 years ago)

Author:

JuergeN

Comment:

--

UbuntuConfiguringApache2ServerSSLProxy

@@ -1 +1 @@
 [[PageOutline]]
 
-= Configuring Apache2 Server as SSL Proxy with htdigest auth =
+= Configuring Apache2 Server as SSL Proxy =
 
-If you want to secure your DeepaMehta server e.g. on a public webserver, you should definitely consider secure https via SSL and some sort of authentication. As DeepaMehta does not yet support these features natively, you can use an Apache2 Server and run it as an SSL proxy with htdigest authentication. Just follow these steps:  
+If you want to secure your DeepaMehta server e.g. on a public webserver, you should definitely consider secure https via SSL. Even though DeepaMehta does support this features natively, you can also use an Apache2 Server and run it as an SSL proxy. Just follow these steps:  
 
 
@@ -12 +12 @@
  0. Load the required modules
  {{{
- a2enmod ssl rewrite proxy proxy_http mod_auth_digest
+ a2enmod ssl rewrite proxy proxy_http
  }}}
- 0. Create htdigest file with user and password
- {{{
- htdigest -c /etc/apache2/.htdigest deepamehta.yourdomain.tld username 
- }}}
- 0. Create file ''deepamehta'' in ''/etc/apache2/sites-available'':
+ 0. Create file ''deepamehta-ssl'' in ''/etc/apache2/sites-available'':
  {{{
  <VirtualHost *:443>
@@ -28 +24 @@
     SSLCertificateFile /etc/apache2/ssl/deepamehta.yourdomain.tld.pem
 
-    ErrorLog /var/log/apache2/deepamehta-error.log
-    CustomLog /var/log/apache2/deepamehta-access.log combined
+    ErrorLog /var/log/apache2/deepamehta-ssl-error.log
+    CustomLog /var/log/apache2/deepamehta-ssl-access.log combined
     
+    NameVirtualHost *:443
+
+    DefaultType text/html
+
     RewriteEngine On 
     RewriteRule ^/?$ http://localhost:8080/de.deepamehta.webclient [P] 
@@ -46 +46 @@
         Order allow,deny
         Allow from all
-        AuthType Digest
-        AuthName "deepamehta.yourdomain.tld"
-        AuthUserFile /etc/apache2/.htdigest
-        Require valid-user
         ProxyPass http://localhost:8080/
         ProxyPassReverse http://localhost:8080/
@@ -56 +52 @@
  </VirtualHost>
  }}}
- 0. Create link to ''/etc/apache2/sites-available/deepamehta'' in ''/etc/apache2/sites-enabled'' and restart the webserver ...
+ 0. Create link to ''/etc/apache2/sites-available/deepamehta-ssl'' in ''/etc/apache2/sites-enabled'' and restart the webserver ...
 
-That's it! You can now securely connect to !https://deepamehta.your.domain.tld and will be asked to identify yourself with a username and password.
+That's it! You can now securely connect to !https://deepamehta.your.domain.tld.
  
 ----