Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Paul F on September 21, 2003, 02:32:20 PM

Title: SSL pages only + SSLizing MySql?
Post by: Paul F on September 21, 2003, 02:32:20 PM

Does anyone have any directions or advice on how to accomplish the following (SME 5.6.:)

a) I want certain pages to be accessed ONLY over SSL as opposed to the current way which seems to be either way (can enter http://xyz.xom/xyz.htm OR https://xyz.con/zyz.htm)

b) How can I "wrap" MySql connections ( <> remote server.)


Thanks for any info!

Title: Re: SSL pages only + SSLizing MySql?
Post by: Nathan Fowler on September 22, 2003, 09:21:17 PM

b)  Using stunnel, you can wrap the mysql connection around a secure tunnel.  Google stunnel, there is a win32 and a linux version.  You can use stunnel + mysqlfront to manage your mysql box remotely.

Remember when working with stunnel you'll probably also need to adjust /etc/hosts.allow

Title: Re: SSL pages only + SSLizing MySql?
Post by: Warren Blackbeard on September 29, 2003, 10:49:45 PM

a) Check the contrib from Darrell May :
Problem:  You want to restrict access to your website (or even individual website subdirectories) by forcing an SSL connection and requiring  username/password authentication for internal and external users.

http://mirror.contribs.org/smeserver/contribs/dmay/mitel/howto/website-access-security-howto.html

Rgds

Warren Blackbeard