[imp] Always SSL connection

[Fred Ho]

Hi All,
   I also change the apache httpd.conf to use VirtualHost but to rewrite or
redirect to https://webmail.domain.com instead.
Everytime you specify the URL in http, it will be redirect to https.

Here's the sample httpd.conf based on IP on the RedHat 7.3 and apache 1.3.23:

<VirtualHost 192.168.1.220:80>
  ServerName webmail.domain.com
  ErrorLog logs/error.log
  TransferLog logs/access.log
  Alias /horde /var/www/html/horde
  DocumentRoot "/var/www/html/horde/imp"
  RewriteEngine On
  RewriteRule ^/(.*)https://webmail.domain.com:443/$1 [L]
  Redirect / https://webmail.domain.com
</VirtualHost>

<VirtualHost 192.168.1.220:443>
  ServerName webmail.domain.com
  SSLEngine on
  ErrorLog logs/error.log
  TransferLog logs/access.log
  SSLCertificateFile /etc/httpd/conf/ssl.crt/<whateverdomain>.crt
  SSLCertificateKeyFile /etc/httpd/conf/ssl.key/<whateverdomain>.key
  Alias /horde /var/www/html/horde
  DocumentRoot "/var/www/html/horde/imp"
  SetEnvIf User-Agent ".*MSIE.*" \
    nokeepalive ssl-unclean-shutdown \
    downgrade-1.0 force-response-1.0
</VirtualHost>

Note that you must create the certificate first and will prompt for the
passphase during apache start.

Regards,
Fred

Quoting Daniel Eckl <daniel.eckl at gmx.de>:

| What do you think of this idea:
| 
| Make a own apache virtual host for port 80.
| There you make a php script named index.php
| 
| Content:
| -------------
| <?php header("Location: https://webmail.mydomain.com/"); exit; ?>
| -------------
| 
| Greets,
| Daniel
| 
| 
| Zitat von arwen at ezballet.com:
| 
| > All rite. I have tried that too.
| > It is "almost" done.
| >
| > When i type webmail.mydomain.com,
| > address still is http://webmail.mydomain.com
| >
| > But this time, (I change the port like what Martin said)
| > I got 3 times of Security Alert (rather than 1 time that I expect)
| >
| > Sidenote:
| > If I type https://webmail.mydomain.com
| > Only 1 time of Security Alert prompt.
| >
| > After clicking Yes button 3 times.
| > I got the Horde login page load properly!
| > (No more action canceled now)
| >
| > I right-click and check properties:
| > url:
| >
|
https://webmail.mydomain.com/horde/imp/login.php?url=https%3A%2F%2Fwebmail.mydomain.com%2Fhorde%2Flogin.php
| >
| > Before was:
| >
|
res://E:\WINDOWS\System32\shdoclc.dll/navcancl.htm#https://webmail.mydomain.com:80/horde/imp/login.php?url=https%3A%2F%2Fwebmail.mydomain.com%3A80%2Fhorde%2Flogin.php
| >
| > HOWEVER,
| > there is no "lock" icon appear in the Internet Explorer. (I expect a
| lock
| > icon appear in the status bar)
| >
| > How to show javascript error?
| > I noticed that there is a warning icon at the buttom.
| >
| >
| >
| > imp-bounces at lists.horde.org wrote on 04/15/2004 11:53:11 AM:
| >
| >> El Jue 15 Abr 2004 11:44, arwen at ezballet.com escribió:
| >> > >
| >> > > I already tried that too.
| >> > >
| >> > > $this->applications['horde']['server_port'] = 443;
| >> > >
| >> > > It doesn't work.
| >> >
| >> > Where you are telling Horde using 443 port, Martin?
| >>
| >> horde/config/registry.php
| >>
| >> --  11:52:02 up 37 days, 16:19,  2 users,  load average: 0.68, 0.54,
| 0.56
| >> -----------------------------------------------------------------
| >> Martín Marqués        | select 'mmarques' || '@' || 'unl.edu.ar'
| >> Centro de Telematica  |  DBA, Programador, Administrador
| >>              Universidad Nacional
| >>                   del Litoral
| >> -----------------------------------------------------------------
| >>
| >> -- IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
| >> Frequently Asked Questions: http://horde.org/faq/
| >> To unsubscribe, mail: imp-unsubscribe at lists.horde.org
| > --
| > IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
| > Frequently Asked Questions: http://horde.org/faq/
| > To unsubscribe, mail: imp-unsubscribe at lists.horde.org
| 
| 
| --
| IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
| Frequently Asked Questions: http://horde.org/faq/
| To unsubscribe, mail: imp-unsubscribe at lists.horde.org
|