Server-Admin-Log

Aus Open Source Ecology - Germany
Zur Navigation springen Zur Suche springen

Create a own SSL certificate

http://mathias-kettner.de/lw_ca_zertifikat_erstellen.html

I created a certificate but I've seen that there already exists a cerificate (already using on mail.opensourceecology.de)


Add HTTPS on login pages of the Wiki and Forum --Tony Ford (talk) 23:26, 23 February 2013 (CET)

File: /etc/apache2/ports.conf

add line

NameVirtualHost *:443

to resolve the message at apache restart

[warn] _default_ VirtualHost overlap on port 443, the first has precedence





File: /ect/apache2/sites-enabled/...wiki

inserted https section

File: /ect/apache2/sites-enabled/...forum

inserted https section

File: /ect/apache2/sites-enabled/...blog

inserted https section

insert https section

duplicate the lines

<VirtualHost *:80> ... </VirtualHost>

adjust the duplicate the portnumber from 80 to 443

insert the following lines to enable SSL (HTTPS)

 # SSL Einschalten
 SSLEngine on
 # Das Zertifikat für den Server
 SSLCertificateFile [URL_to_Servercert]
 # Die Schlüsseldatei für den Server
 SSLCertificateKeyFile [URL_to_Serverkey]


Redirect from HTTP to HTTPS (only for information)

following lines inside the VirtualHost *:80 -tags would redirect HTTP to HTTPS.

This is only for information! It will not applied!


RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule .* https://wiki.opensourceecology.de/%{REQUEST_URI} [R,L]




Adjust the wiki LocalSettings.php --Tony Ford (talk) 12:00, 28 February 2013 (CET)

File: .../wiki/LocalSettings.php

replace line

$wgServer           = "https://wiki.opensourceecology.de";

with this lines

$wgProto = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 'https' : 'http';
$wgServer = $wgProto."://wiki.opensourceecology.de";

Wiki HTTP is now selectable.


activate HTTPS Login with selectable redirection back to HTTP after login

add line

$wgSecureLogin=true;


Shorten Wiki-URL (from .../wiki/Page to .../Page) --Tony Ford (talk) 12:00, 28 February 2013 (CET)

adjust Localsettings.php ($wgArticlePath) --Tony Ford (talk) 12:00, 28 February 2013 (CET)

set $wgArticlePath to

$wgArticlePath = "$wgScriptPath/$1";


adjust .htaccess (Redirection) --Tony Ford (talk) 12:00, 28 February 2013 (CET)

old

RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^wiki/(.*)$ /index.php?title=$1 [PT,L,QSA] RewriteRule ^wiki/*$ wiki/ [L,QSA] RewriteRule ^/*$ /wiki/ [L,QSA]

new

RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^(.*)$ /index.php?title=$1 [PT,L,QSA]