Welcome! Log In Create A New Profile

Advanced

[SOLVED] Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Johannes Graumann
October 01, 2010 04:14AM
Opening the default 8080 port to setup a plone site ("PloneSiteName")
independent of NGINX and figuring out how to access plone's
VirtualHostMonster fixed this.

I now run successfully

server {
listen 8443;# Custom port as the standard 443 is taken by kolab
server_name myserver.net;
# SSL is using KOLAB generated credentials
ssl on;
ssl_certificate /kolab/etc/kolab/cert.pem;
ssl_certificate_key /kolab/etc/kolab/key.pem;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
ssl_prefer_server_ciphers on;
location / {
proxy_pass
http://localhost:8080/VirtualHostBase/https/myserver.net:8443/PloneSiteName/VirtualHostRoot/;
}
}

Cheers, Joh

Johannes Graumann wrote:

> mat h wrote:
>
>> try using 127.0.0.1 instead of localhost.
>
> Thanks. Trying to go beyond the start age I now get stuck with a failing
> http://127.0.0.1:8080/@@plone-addsite?site_id=Plone ...
>
> Joh
>
>>
>> On Wed, Sep 29, 2010 at 4:20 AM, Johannes Graumann
>> <johannes_graumann@web.de> wrote:
>>> Igor Sysoev wrote:
>>>
>>>> On Tue, Sep 28, 2010 at 07:17:13PM +0200, Johannes Graumann wrote:
>>>>
>>>>> Hello,
>>>>>
>>>>> I have a domain (www.graumannschaft.org) that points to a non-standard
>>>>> ssl- port on a server I rent (h1616679.stratoserver.net:442), as 443
>>>>> is taken by an unrelated Apache instance.
>>>>> The server now hold a virgin buildout of Plone4, listening on 8080.
>>>>> I want to wrap that zope/plone cnnetion into ssl using NGINX and hsve
>>>>> so fa the following:
>>>>>
>>>>> server {
>>>>> listen 442;# Custom port as the standard 443 is taken by kolab
>>>>> server_name www.graumannschaft.org;
>>>>> # SSL is using KOLAB generated credentials
>>>>> ssl on;
>>>>> ssl_certificate /kolab/etc/kolab/cert.pem;
>>>>> ssl_certificate_key /kolab/etc/kolab/key.pem;
>>>>> ssl_session_timeout 5m;
>>>>> ssl_protocols SSLv3 TLSv1;
>>>>> ssl_ciphers
>>>>> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
>>>>> ssl_prefer_server_ciphers on;
>>>>> location / {
>>>>> proxy_pass http://localhost:8080;
>>>>> }
>>>>> }
>>>>>
>>>>> This gets me to Plone4's "Plone is up and running. * Your Plone site
>>>>> has not been added yet ..." age just fine, but clicking the button
>>>>> "Create a new Plone Site" redirects me to localhost:8080, which
>>>>> unsurprisingly doesn't work.
>>>>> I'm obviously lacking rewriting, but whatever I have tried along the
>>>>> lines of googled examples (which mostly rely n already up and running
>>>>> plone sites and plone's VirtulHostMonster), has not worked.
>>>>>
>>>>> Can someone lease nudge me into the right direction?
>>>>
>>>> location / {
>>>> proxy_pass http://localhost:8080;
>>>> proxy_redirect http://localhost:8080/ /;
>>>> }
>>>>
>>> Thanks! I have now
>>>
>>> server {
>>> listen 442;# This is a custom port as the standard 443 is taken by
>>> kolab server_name www.graumannschaft.org h1616679.stratoserver.net;
>>> # SSL is using KOLAB generated credentials
>>> ssl on;
>>> ssl_certificate /kolab/etc/kolab/cert.pem;
>>> ssl_certificate_key /kolab/etc/kolab/key.pem;
>>> ssl_session_timeout 5m;
>>> ssl_protocols SSLv3 TLSv1;
>>> ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3 +EXP;
>>> ssl_prefer_server_ciphers on;
>>> location / {
>>> proxy_pass http://localhost:8080;
>>> proxy_redirect http://localhost:8080/ /;
>>> }
>>> }
>>>
>>> But when trying to move on from plone's default start page (at
>>> https://h1616679.stratoserver.net:442/), I still end at
>>> http://localhost:8080/@@plone-addsite?site_id=Plone, which keeps not
>>> working ...
>>>
>>> Thanks for any hint, Joh
>>>
>>>
>>>
>>> _______________________________________________
>>> nginx mailing list
>>> nginx@nginx.org
>>> http://nginx.org/mailman/listinfo/nginx
>>>
>>
>> _______________________________________________
>> nginx mailing list
>> nginx@nginx.org
>> http://nginx.org/mailman/listinfo/nginx
>
>
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://nginx.org/mailman/listinfo/nginx



_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Igor Sysoev September 28, 2010 01:30PM

Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Johannes Graumann September 28, 2010 02:24PM

Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

mat h September 28, 2010 09:36PM

Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Johannes Graumann September 29, 2010 01:36AM

Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Francis Daly September 29, 2010 11:36AM

[SOLVED] Re: Newbie: Trying to ssl-wrap Plone4 using non-standard port

Johannes Graumann October 01, 2010 04:14AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 196
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready