Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@couchdb.apache.org
Received-SPF: pass (athena.apache.org: domain of nestor.urquiza@gmail.com
 designates 209.85.212.52 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CABvT1DF-Q0wkHrrGGi1tuy5vQfcqAGEXzxc4vwn+oVH5qj0PLQ@mail.gmail.com>
References: 
 <CAGkcVShNmsui=i-0DJrcumubOdrkWKge3PLJN5wpVwx3zfrS9w@mail.gmail.com>
	<CAGkcVSgfYcmVpV_cnMWwXBQxR2b_vy+OSyCQ7xk9L-ovpPXzvw@mail.gmail.com>
	<9F256A04-37E0-46F8-A015-B4EC489D5993@vpro.nl>
	<CAJNb-9rHt-tK=WdrKNk2YWtqR63Vc3gi3yS8bU4+qSH0T2FWLg@mail.gmail.com>
	<CABvT1DF-Q0wkHrrGGi1tuy5vQfcqAGEXzxc4vwn+oVH5qj0PLQ@mail.gmail.com>
Date: Fri, 21 Oct 2011 08:37:45 -0400
Message-ID: 
 <CAGkcVShdn_rT8gSjb-qEs6134QtsH_OVH7CB+r8epryv5bwAnw@mail.gmail.com>
Subject: Re: Disable default unsecure plain HTTP 5984
From: Nestor Urquiza <nestor.urquiza@gmail.com>
To: user@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Thanks for the fast responses.

Here is what I have in daemons section:
[daemons]
; enable SSL support by uncommenting the following line and supply the
PEM's below.
; the default ssl port CouchDB listens on is 6984
httpsd =3D {couch_httpd, start_link, [https]}

Still I get the below:
$ ./utils/run
Apache CouchDB 1.1.1a1186848 (LogLevel=3Dinfo) is starting.
[info] [<0.97.0>] Attempting to start replication
`d30383157f3a29c1356051d04c7a5ed8+continuous+create_target` (document
`by_clientId`).
Apache CouchDB has started. Time to relax.
[info] [<0.31.0>] Apache CouchDB has started on http://127.0.0.1:5984/
[info] [<0.31.0>] Apache CouchDB has started on https://127.0.0.1:6984/

Not sure what I am missing.
Best,
-Nestor


On Fri, Oct 21, 2011 at 7:32 AM, Robert Newson <rnewson@apache.org> wrote:
> Fairly sure you can do as Benoit suggests. It was certainly my
> intention to allow one or other or both, and that was the case when I
> did the original work.
>
> B.
>
> On 21 October 2011 12:24, Benoit Chesneau <bchesneau@gmail.com> wrote:
>> On Fri, Oct 21, 2011 at 12:56 PM, Nils Breunese <N.Breunese@vpro.nl> wro=
te:
>>> Nestor Urquiza wrote:
>>>
>>>> Is it possible to leave just SSL (6984) listening? I have enabled SSL
>>>> but requests are still accepted via plain HTTP 5984.
>>>
>>> I don't know if CouchDB has a configuration setting that lets you disab=
le HTTP, but I guess you could use a firewall to block access to the HTTP p=
ort?
>>>
>>> Nils.
>>> -----------------------------------------------------------------------=
-
>>> =A0VPRO =A0 www.vpro.nl
>>> -----------------------------------------------------------------------=
-
>>>
>> You can probably comment the httpd line in [daemons] and only use the ht=
tps one.
>>
>> - benoit
>>
>