Re: [SLUG] apache and apache-ssl

[Jan Schmidt <jan@xxxxxxxxxxx>]

<quote who="David Fitch">

> On Mon, 2002-09-02 at 21:19, Jan Schmidt wrote:
> > <quote who="David Fitch">
> > > I want ssl for squirrelmail/webmail so the passwds are not
> > > plain text so installed both but it always only hits the
> > > normal apache.
> > 
> > Um... presumably you're using a https URL?
> 
> well trouble is squirrelmail just adds a little include to the
> end of httpd.conf which is:
> Alias /squirrelmail /usr/share/squirrelmail
> Alias /webmail /usr/share/squirrelmail

I noticed that when I set it up... the package only sets up for http access,
not https. I added the lines to the httpd.conf for apache-ssl and removed
them from apache.

> so, no there's no https bit
> 
> > Do you mean that it's redirecting
> > you to the http address?
> > 
> > Anything in the logfiles?
> 
> normal bits in the apache access file, nothing in the apache-ssl
> logs - it's going to apache not apache-ssl, ie. not using
> ssl/https.

Well, the difference is that you'll use a https://x.y.z/squirrelmail/ as the
URL when you connect... thus hitting port 443 instead of the port 80 server.

> I guess I just have to force that url to be https??

Yeah, although from memory I saw some strangeness with squirrelmail
rewriting the URL to be http://x.y.z:443/squirrelmail and failing if I
didn't have a trailing / on the url.

IE, https://x.y.z/squirrelmail/ not https://x.y.z/squirrelmail

J.
--
Jan Schmidt                                  thaytan@xxxxxxxxxxxxxxxxx

"Don't Panic" -- The Hitchhiker's Guide to the Galaxy