[Koha] Enabling SSL for Koha staff view

Mizst Audens mizstik at gmail.com
Sat May 14 14:27:43 NZST 2011


On Sat, May 14, 2011 at 7:06 AM, MJ Ray <mjr at phonecoop.coop> wrote:

> Mizst Audens wrote:
> > Your server returned a 400 Bad Request for the http on port 443. :-)
>
> Yes, it detected the http and served you html, did you notice? :-)
> Only an error message, but as I wrote: serving http seamlessly is
> probably a bad idea (easy to lose security by typo).
>
>
Oh I thought that was a standard error message or something, since my server
does the same thing without any configuration. And anyway I thought you were
referring to serving a functioning page, not an error message.



> > But glad to hear that SNI is going to come standard now, at least in some
> > distro.
> >
> > I think that information pertaining to Koha deployment should be
> considered
> > relevant to the list, and in my opinion that includes some nuances of all
> > the facilities that Koha requires for its operations and for the needs of
> > the library, in this case adding security for the staff interface.
>
> Sorry, but I feel the list needs a limit.  Configuring Apache HTTPD
> isn't specific to Koha, there is plenty of help available on more
> mainstream sites and the Koha list seems pretty busy with Koha
> questions already, without adding the setup of Apache, MySQL and
> GNU/Linux to it.  Also, there are other ways to secure the staff
> interface without dealing with this, such as a VPN.
>
>
Yes, there needs to be some limit, but I think not having this in Koha list
is counter productive. We at least need to be able to discuss the issues
that Koha users can run into, or what kind of config is best when trying to
run Koha, etc. Same thing with setting up mail for Koha and that sort of
thing. All the posts stay in its own topic anyway.

Sure, you can use VPN. And you can use SSL. So?


> > Surely, anyone considering to add SSL to their Koha server is going
> > to run into these issues.
>
> Surely not?  I think most users run only one Koha.
>
>
See TC's post. He was trying to add SSL to both OPAC and staff area. That
makes it two virtualhosts, and he did run into a problem trying to get SSL
to work.

--Mizst

Regards,
> --
> MJ Ray (slef), member of www.software.coop, a for-more-than-profit co-op.
> http://koha-community.org supporter, web and LMS developer, statistician.
> In My Opinion Only: see http://mjr.towers.org.uk/email.html
> Available for hire for Koha work http://www.software.coop/products/koha
> _______________________________________________
> Koha mailing list  http://koha-community.org
> Koha at lists.katipo.co.nz
> http://lists.katipo.co.nz/mailman/listinfo/koha
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.katipo.co.nz/pipermail/koha/attachments/20110514/f9158be3/attachment.htm 


More information about the Koha mailing list