httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From pas...@linuxorable.net
Subject RE: [users@httpd] SSL
Date Tue, 08 Feb 2005 12:05:35 GMT
Quoting Boyle Owen <Owen.Boyle@swx.com>:

>
>
>> -----Original Message-----
>> From: pascal@linuxorable.net [mailto:pascal@linuxorable.net]
>> Sent: Dienstag, 8. Februar 2005 00:40
>> To: users@httpd.apache.org
>> Subject: [users@httpd] SSL
>>
>>
>> Hi,
>>
>> I would like to know if there is a way to configure
>> apache2.conf in order to
>> have SSL access only to some subdirectories (subfolders) of
>> my DocumentRoot ?
>
> Sort of...
>
> SSL is not some attribute that you apply at directory-level (like
> password access). Rather, SSL is a separate virtual host which uses a
> different port and docroot etc. It's like you have an SSL website...
>
> To do what you want, you first set up an SSL VH whose docroot is the
> subdir you want. Then, in the VH of the plain HTTP site, you redirect
> from the subdir to the ssl site. Eg:
>
>
> <VH *:443>
>   DocumentRoot sub-dir
>   ...
>
> <VH *:80>
>   <Directory sub-dir>
>     Redirect / https://your-server/
>   </Directory>
>   ...
>
> Rgds,
> Owen Boyle

Thanks a lot !

Pascal
> Disclaimer: Any disclaimer attached to this message may be ignored.
>>
>> Example:
>>
>> DocumentRoot = /usr/local/www
>> and there are these folders:
>> /usr/local/www/folder/subfolder1/subfolder2/index.html
>>
>> and I would like a SSL access only for subforder2
>>
>>
>>
>> Currently, to do such a thing I do:
>>
>> <VirtualHost 82.67.66.131:80>
>> ServerName "www.example.net"
>> DocumentRoot "/usr/local/www/nossl"
>> </VirtualHost>
>> SSLProtocol +TLSv1 +SSLv3
>> SSLCACertificateFile "/usr/lib/ssl/mon_AC/private/mon_AC.crt"
>> SSLCertificateFile "/usr/lib/ssl/mon_AC/certs/server_signed.pem"
>> SSLCertificateKeyFile "/usr/lib/ssl/mon_AC/private/server_tls.pem"
>> NameVirtualHost 82.67.66.131:443
>> DocumentRoot "/usr/local/www/ssl"
>> <VirtualHost 82.67.66.131:443>
>> SSLEngine On
>> ServerName "www.example.net"
>> <Directory "/usr/local/www/ssl/phpLDAPadmin_0.9.5">
>> SSLRequireSSL
>> </Directory>
>> </VirtualHost>
>>
>> Thank you for your help
>>
>> Pascal -- FRANCE
>>
>> ----------------------------------------------------------------
>> This message was sent using IMP, the Internet Messaging Program.
>>
>>
>> ---------------------------------------------------------------------
>> The official User-To-User support forum of the Apache HTTP
>> Server Project.
>> See <URL:http://httpd.apache.org/userslist.html> for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
> Diese E-mail ist eine private und persönliche Kommunikation. Sie hat
> keinen Bezug zur Börsen- bzw. Geschäftstätigkeit der SWX Gruppe. This
> e-mail is of a private and personal nature. It is not related to the
> exchange or business activities of the SWX Group. Le présent e-mail est
> un message privé et personnel, sans rapport avec l'activité boursière du
> Groupe SWX.
>
> This message is for the named person's use only. It may contain
> confidential, proprietary or legally privileged information. No
> confidentiality or privilege is waived or lost by any mistransmission.
> If you receive this message in error, please notify the sender urgently
> and then immediately delete the message and any copies of it from your
> system. Please also immediately destroy any hardcopies of the message.
> You must not, directly or indirectly, use, disclose, distribute, print,
> or copy any part of this message if you are not the intended recipient.
> The sender's company reserves the right to monitor all e-mail
> communications through their networks. Any views expressed in this
> message are those of the individual sender, except where the message
> states otherwise and the sender is authorised to state them to be the
> views of the sender's company.
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>



----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message