[kforge-user] http vs. https

[Gunnar Johansson]

Hi,

Yes, I currently redirect http to https in apache, which works  
reasonably well. The only problem I have is that users get confused  
when the svn repositories fail at http although it "says so on the  
service page"  :-)

Anyway, I've never worked with python web apps before, but maybe this  
can be something of value?
http://trac.edgewall.org/changeset/1276
http://www.modpython.org/pipermail/mod_python/2004-September/016452.html

Maybe one (uglier) option would be to use Django's HttpRequest object  
to read SERVER_PORT and compare this to the ports given in the kforge  
config.

Cheers,
Gunnar

1 okt 2007 kl. 13.53 skrev John Bywater:

> Hi Gunnar,
>
> So, this aspect is a bit of a mess, and I'm not exactly sure what  
> to do about it.
>
> The www.port_https config option just controls which port https is  
> served on. But KForge apache config builder doesn't now take  
> responsibility for configuring a virtual server, but just creates a  
> "fragment" of apache config which can be included in a virtual  
> server (along with other things, as required).
>
> Rufus and I spotted that there is some code which creates full  
> URLs, and an "http://" is hard-coded in here, which isn't great.
>
> So, for now I suggest that if you want to force users to go through  
> https, then configure your Web server to redirect.
>
> Hopefully we'll put some more design into this, so if you've got  
> any good ideas, do let us know.
>
> Best wishes,
>
> John.
>
>
>
>
>
> Gunnar Johansson wrote:
>> Hi,
>>
>> I have a minor "bug" to report. We force our users to go through   
>> https when accessing the server, but the URLs for services seem to  
>> be  hard-coded into http.  Any suggestions on how to automatically  
>> detect  how the page is called?  I see there's a www.port_https  
>> option in the  kforge config - does this have any relevance?
>>
>> Cheers,
>> Gunnar
>>
>>
>> _______________________________________________
>> kforge-user mailing list
>> kforge-user at lists.okfn.org
>> http://lists.okfn.org/mailman/listinfo/kforge-user
>>
>>
>>
>>
>
>
> -- 
> Appropriate Software Foundation
> Registered in England and Wales
> 17 Chapel Street, Hyde Cheshire
> Company number: 04977110
> W: appropriatesoftware.net
> T: 0870 720 2944
> M: 0781 139 2292
>
>