Return-Path: X-Original-To: apmail-couchdb-user-archive@www.apache.org Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id A9599962B for ; Fri, 21 Oct 2011 13:16:27 +0000 (UTC) Received: (qmail 1994 invoked by uid 500); 21 Oct 2011 13:16:26 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 1956 invoked by uid 500); 21 Oct 2011 13:16:26 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 1948 invoked by uid 99); 21 Oct 2011 13:16:26 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 21 Oct 2011 13:16:26 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=FREEMAIL_FROM,NORMAL_HTTP_TO_IP,RCVD_IN_DNSWL_LOW,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL,WEIRD_PORT X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of nestor.urquiza@gmail.com designates 209.85.216.180 as permitted sender) Received: from [209.85.216.180] (HELO mail-qy0-f180.google.com) (209.85.216.180) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 21 Oct 2011 13:16:21 +0000 Received: by qyk10 with SMTP id 10so4371400qyk.11 for ; Fri, 21 Oct 2011 06:16:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=WstCKMfTfF0Fv8C/awU4x6WEp/aBS5iqr0AVIqtThyo=; b=bgw/iQPthNHpPSyAtueoOVK05dsY/gka2Oz5GpkZPLGcys88xNJKghE26K4+iPBlZm 76pN73muQjU+ALYxaVcTB6P31VeaQYi50eKJCaHWSXMZWInhQBn+TDKQp3vOEKIRPHyS pzedndsEF2S707C5ejxudlbI226OIdUI4Ycng= MIME-Version: 1.0 Received: by 10.182.36.36 with SMTP id n4mr1094878obj.16.1319202960111; Fri, 21 Oct 2011 06:16:00 -0700 (PDT) Received: by 10.182.15.101 with HTTP; Fri, 21 Oct 2011 06:16:00 -0700 (PDT) In-Reply-To: References: <9F256A04-37E0-46F8-A015-B4EC489D5993@vpro.nl> Date: Fri, 21 Oct 2011 09:16:00 -0400 Message-ID: Subject: Re: Disable default unsecure plain HTTP 5984 From: Nestor Urquiza To: user@couchdb.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable That was it: I did the change in default,ini and that did the trick. Thanks! -Nestor On Fri, Oct 21, 2011 at 8:53 AM, Benoit Chesneau wrot= e: > On Fri, Oct 21, 2011 at 2:37 PM, Nestor Urquiza > wrote: >> Thanks for the fast responses. >> >> Here is what I have in daemons section: >> [daemons] >> ; enable SSL support by uncommenting the following line and supply the >> PEM's below. >> ; the default ssl port CouchDB listens on is 6984 >> httpsd =3D {couch_httpd, start_link, [https]} >> >> Still I get the below: >> $ ./utils/run >> Apache CouchDB 1.1.1a1186848 (LogLevel=3Dinfo) is starting. >> [info] [<0.97.0>] Attempting to start replication >> `d30383157f3a29c1356051d04c7a5ed8+continuous+create_target` (document >> `by_clientId`). >> Apache CouchDB has started. Time to relax. >> [info] [<0.31.0>] Apache CouchDB has started on http://127.0.0.1:5984/ >> [info] [<0.31.0>] Apache CouchDB has started on https://127.0.0.1:6984/ >> >> Not sure what I am missing. >> Best, >> -Nestor >> >> >> On Fri, Oct 21, 2011 at 7:32 AM, Robert Newson wrot= e: >>> Fairly sure you can do as Benoit suggests. It was certainly my >>> intention to allow one or other or both, and that was the case when I >>> did the original work. >>> >>> B. >>> >>> On 21 October 2011 12:24, Benoit Chesneau wrote: >>>> On Fri, Oct 21, 2011 at 12:56 PM, Nils Breunese w= rote: >>>>> Nestor Urquiza wrote: >>>>> >>>>>> Is it possible to leave just SSL (6984) listening? I have enabled SS= L >>>>>> but requests are still accepted via plain HTTP 5984. >>>>> >>>>> I don't know if CouchDB has a configuration setting that lets you dis= able HTTP, but I guess you could use a firewall to block access to the HTTP= port? >>>>> >>>>> Nils. >>>>> ---------------------------------------------------------------------= --- >>>>> =A0VPRO =A0 www.vpro.nl >>>>> ---------------------------------------------------------------------= --- >>>>> >>>> You can probably comment the httpd line in [daemons] and only use the = https one. >>>> >>>> - benoit >>>> >>> >> > > did you comment the line in default.ini? > > - benoit >