Reply New Topic
2009/8/1 4:14:42
#1
Offline
Home away from home

SSL login - how to set up?

Just setting up a new site and thought, why not use the SSL login for a change. But I'm not clear on how it works:

Quote:

URL where SSL login page is located: https://



Do I need to build a new login page or something?


2009/8/1 5:20:55
#2
Offline
Home away from home

Re: SSL login - how to set up?

hi!

no, there is one single file you have to put to your ssl encryptet place. example: http://www.xyz.com/ is your normal sites place. the ssl loginfile might reside in https://www.xyz.com

you find the file you need in the extras folder when you uncompress the icms install package.

hope this helps

bye!

_________________
The best way to predict the future is to invent it! (Alan Kay)
Good things happen when you go for it! (Alan Webb)
Seek the wisdom of the ages, but look at the world through the eyes of a child.

2009/8/1 5:44:08
#3
Offline
Home away from home

Re: SSL login - how to set up?

Thanks. Can I put the ssl directory in the web root for my site, or is it meant to sit outside the web root (like the trust path does)?


2009/8/1 5:51:13
#4
Offline
Home away from home

Re: SSL login - how to set up?

yes you can
but: if your hosting setup says that there is only one folder(the httpdocs) for ssl and non ssl connections, then you should put the ssl loginfile into a exclusive folder within your documentroot, hence, a foulder without anything else in it. otherwise, you browser may come up with the panic notice that the connection is encryptet but that there are other unencryptet files.
if your ssl place is the httpsdocs documentroot and you physically reach this directory when typing https in your browser, then you can put the loginfile wherever you want.

i hope this is 100% correct. i tried it, but maybe there are possible differences i dont know about.

bye!

_________________
The best way to predict the future is to invent it! (Alan Kay)
Good things happen when you go for it! (Alan Webb)
Seek the wisdom of the ages, but look at the world through the eyes of a child.

2009/8/1 6:40:01
#5
Offline
Home away from home

Re: SSL login - how to set up?

Hmm...is it possible to have my whole site in SSL? Or does this only do the login?


2009/8/1 8:45:27
#6
Offline
Home away from home

Re: SSL login - how to set up?

of course it is, but regarding the "ssl login feature" the only encryptet thig is the logincredentials.
if your serversettings say that there is only one folder(httpdocs) for secure and "insercure" connection, than you can simply change the physicalpath in your trustpath mainfile. then you can access the site via https. other option is to maybe clone your whole site and put it directly into the httpsdocs folder. then, you settings must respond to this as well, hence to search in the httpsdocs folder when entering the site via https.

there might be one thing that prevents you from running your site in ssl only. google if u use any kind of googlemaps service on your site, u mustn do that on a sll site, if you wan to, it need a mapspro account that costs approx 10k usd( ) per year.
this is a real issue when you want gmaps and for example a shop on your same site install. oledrion should have the feature to run it in ssl mode only while everything else uses just http, that would be fine but: if you have a ssl certificate, a bought one i mean, then you might be unpleased that on a mixed system(http and https at same physical location) your users get a warning that not every content is encrptet.
on the other hand, when you have a ssl site and dont mind googles rules, you may get away with a browserwarning that there is non encryptet content embedded in your ssl site because the maps api you get for free connects via non encrypted line.

its kinda dillema.

bye

_________________
The best way to predict the future is to invent it! (Alan Kay)
Good things happen when you go for it! (Alan Webb)
Seek the wisdom of the ages, but look at the world through the eyes of a child.

Reply New Topic extras
 Previous Topic   Next Topic
You can view topic.
You can start a new topic.
You can reply to posts.
You cannot edit your posts.
You cannot delete your posts.
You cannot add new polls.
You cannot vote in polls.
You cannot attach files to posts.
You can post without approval.