2009/8/1 4:14:42
|
---|
![]() |
SSL login - how to set up?Just setting up a new site and thought, why not use the SSL login for a change. But I'm not clear on how it works:
Quote:
Do I need to build a new login page or something? |
2009/8/1 5:20:55
|
---|
![]() |
Re: SSL login - how to set up?hi!
no, there is one single file you have to put to your ssl encryptet place. example: http://www.xyz.com/ is your normal sites place. the ssl loginfile might reside in https://www.xyz.com you find the file you need in the extras folder when you uncompress the icms install package. hope this helps bye! |
_________________
The best way to predict the future is to invent it! (Alan Kay) Good things happen when you go for it! (Alan Webb) Seek the wisdom of the ages, but look at the world through the eyes of a child. |
2009/8/1 5:44:08
|
---|
![]() |
Re: SSL login - how to set up?Thanks. Can I put the ssl directory in the web root for my site, or is it meant to sit outside the web root (like the trust path does)?
|
2009/8/1 5:51:13
|
---|
![]() |
Re: SSL login - how to set up?yes you can
![]() but: if your hosting setup says that there is only one folder(the httpdocs) for ssl and non ssl connections, then you should put the ssl loginfile into a exclusive folder within your documentroot, hence, a foulder without anything else in it. otherwise, you browser may come up with the panic notice that the connection is encryptet but that there are other unencryptet files. if your ssl place is the httpsdocs documentroot and you physically reach this directory when typing https in your browser, then you can put the loginfile wherever you want. i hope this is 100% correct. i tried it, but maybe there are possible differences i dont know about. bye! |
_________________
The best way to predict the future is to invent it! (Alan Kay) Good things happen when you go for it! (Alan Webb) Seek the wisdom of the ages, but look at the world through the eyes of a child. |
2009/8/1 6:40:01
|
---|
![]() |
Re: SSL login - how to set up?Hmm...is it possible to have my whole site in SSL? Or does this only do the login?
|
2009/8/1 8:45:27
|
---|
![]() |
Re: SSL login - how to set up?of course it is, but regarding the "ssl login feature" the only encryptet thig is the logincredentials.
if your serversettings say that there is only one folder(httpdocs) for secure and "insercure" connection, than you can simply change the physicalpath in your trustpath mainfile. then you can access the site via https. other option is to maybe clone your whole site and put it directly into the httpsdocs folder. then, you settings must respond to this as well, hence to search in the httpsdocs folder when entering the site via https. there might be one thing that prevents you from running your site in ssl only. google ![]() ![]() this is a real issue when you want gmaps and for example a shop on your same site install. oledrion should have the feature to run it in ssl mode only while everything else uses just http, that would be fine but: if you have a ssl certificate, a bought one i mean, then you might be unpleased that on a mixed system(http and https at same physical location) your users get a warning that not every content is encrptet. on the other hand, when you have a ssl site and dont mind googles rules, you may get away with a browserwarning that there is non encryptet content embedded in your ssl site because the maps api you get for free connects via non encrypted line. its kinda dillema. bye |
_________________
The best way to predict the future is to invent it! (Alan Kay) Good things happen when you go for it! (Alan Webb) Seek the wisdom of the ages, but look at the world through the eyes of a child. |