Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Zope: Users

Zope and SSL

 

 

Zope users RSS feed   Index | Next | Previous | View Threaded


creinehr at huntingdon

Mar 16, 2009, 10:16 AM

Post #1 of 4 (1147 views)
Permalink
Zope and SSL

Hello,

I'm trying to find out how to generate a CSR, and I can't find the
information I need. All my research covers Zope and Apache or Zope and
Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be
exact. Unfortunately, I know next to nothing about setting up a secure
server anyway. Any help you can offer would be much appreciated!


Thanks,
Cat

-----

Catherine E. Reinehr
Webmaster & Director of Publications
Huntingdon College
1500 E. Fairview Ave.
Montgomery, AL 36106
(334) 833-4429 / Flowers 218B



_______________________________________________
Zope maillist - Zope [at] zope
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


lists at zopyx

Mar 16, 2009, 10:20 AM

Post #2 of 4 (1065 views)
Permalink
Re: Zope and SSL [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 16.03.2009 18:16 Uhr, Catherine E. Reinehr wrote:
> Hello,
>
> I'm trying to find out how to generate a CSR, and I can't find the
> information I need. All my research covers Zope and Apache or Zope and
> Linux, etc., but our server is running ONLY Zope.

The recommended way for doing Zope + SSL is by using Apache, Squid or
Varnish as reverse *especially* when you are using Zope on a public
network. So please follow this recommendation. Setting Apache as SSL
server is documented in tons of documents - and the related
configuration for Zope behind an Apache server doing the SSL is also
straight forward.

- -aj
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkm+inEACgkQCJIWIbr9KYxBWgCfcKVry1jnf2O4LJ6wLS6JgxSU
0G8AoL4UZooAauWUuFDVlub0U1WTvn+u
=o+lT
-----END PGP SIGNATURE-----
Attachments: lists.vcf (0.31 KB)


morten at nidelven-it

Mar 16, 2009, 10:21 AM

Post #3 of 4 (1062 views)
Permalink
Re: Zope and SSL [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Catherine,

well.. I don't have much experience running SSL on Zope itself, but
we use Apache in front and that works well.

You'll just have to figure out some RewriteRule directives for
Apache and configure it. Most SSL providers (that I've seen anyway)
do have clear instructions on how to go about SSL when Apache is involved.

- -Morten

Catherine E. Reinehr wrote:
> Hello,
>
> I'm trying to find out how to generate a CSR, and I can't find the
> information I need. All my research covers Zope and Apache or Zope and
> Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be
> exact. Unfortunately, I know next to nothing about setting up a secure
> server anyway. Any help you can offer would be much appreciated!
>
>
> Thanks,
> Cat
>
> -----
>
> Catherine E. Reinehr
> Webmaster & Director of Publications
> Huntingdon College
> 1500 E. Fairview Ave.
> Montgomery, AL 36106
> (334) 833-4429 / Flowers 218B
>
>
>
> _______________________________________________
> Zope maillist - Zope [at] zope
> http://mail.zope.org/mailman/listinfo/zope
> ** No cross posts or HTML encoding! **
> (Related lists -
> http://mail.zope.org/mailman/listinfo/zope-announce
> http://mail.zope.org/mailman/listinfo/zope-dev )
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkm+iocACgkQmq0JiiIWC2rBcwCeINv9NFBAnslnP/LQF/PpRpvm
qVgAnRUjz/kEpkLT9SDctRAlFqqRXcGF
=cQ9o
-----END PGP SIGNATURE-----
_______________________________________________
Zope maillist - Zope [at] zope
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )


pycry at doli

Mar 16, 2009, 1:48 PM

Post #4 of 4 (1062 views)
Permalink
Re: Zope and SSL [In reply to]

Cat,
> I'm trying to find out how to generate a CSR, and I can't find the
> information I need.
If you are trying to generate a CSR, you probably need to use OpenSSL,
not Zope. If your *Zope application* needs to generate a CSR for some
reason, you need to interface OpenSSL from Zope somehow - either using
command line interface (works great if you do it carefully) or using
M2Crypto or another wrapper (more hassle than benefit, if you are not
doing something really complex). Well, there is PyCrypto that I haven't
looked into, maybe the bright future is here already :-).
> All my research covers Zope and Apache or Zope and
> Linux, etc., but our server is running ONLY Zope. Version 2.6.2, to be
> exact. Unfortunately, I know next to nothing about setting up a secure
> server anyway. Any help you can offer would be much appreciated!
>
With this ancient version of Zope you actually may have some luck
setting up a secure server without Apache or another reverse, using
hacks provided in the earlier versions of M2Crypto. Be careful: it leaks
memory when not in a good mood. But really, consider putting Apache in
the front.

M
_______________________________________________
Zope maillist - Zope [at] zope
http://mail.zope.org/mailman/listinfo/zope
** No cross posts or HTML encoding! **
(Related lists -
http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )

Zope users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.