Re: [Sks-devel] Re: details to configure SKS https web interface

[Jan Kesten]

Hi Daniel,

should be something like this:

<VirtualHost foo.bar.com:443>
   ServerAdmin address@hidden
   DocumentRoot /var/www/
   SSLEngine on
   ServerName foo.bar.com
   SSLCertificateKeyFile /etc/apache2/ssl/apache.pem
   SSLCertificateFile /etc/apache2/ssl/apache.crt
   SSLProtocol all
   SSLCipherSuite HIGH:MEDIUM
   SSLProxyEngine On
   <Location /pks>
        ProxyPass http://127.0.0.1:11371/pks
        ProxyPassReverse http://127.0.0.1:11371/pks
   </Location>
</VirtualHost>

Of course you need mod_proxy and mod_ssl ;-)

Cheers,
Jan

2009/3/15 Daniel Kahn Gillmor <address@hidden>:
> On 03/15/2009 11:23 AM, Gab wrote:
>> Daniel Kahn Gillmor wrote:
>>> On 03/07/2009 03:03 PM, Joseph Oreste Bruni wrote:
>>>> On Mar 7, 2009, at 8:11 AM, Gab wrote:
>>>>> I wish to in https ssl the sks web interface .
>>>>> What are the directives for cert.pem and key.pem and to enable ssl ?
>>>> I don't believe that the built-in web server supports SSL. However, you
>>>> could front-end SKS with Apache configured as a proxy.
>>> We're currently doing this on zimmermann with nginx providing the
>>> front-layer proxy (still using X.509-certified TLS, unfortunately).
>> What would be the procedure for apache2 ?
>
> I don't have any experience with using apache2 as a reverse proxy with
> TLS enabled.  It would be great if someone who does use it that way
> wanted to share their configuration.
>
>        --dkg
>
>
> _______________________________________________
> Sks-devel mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/sks-devel
>
>