Re: WebObjects and HTTPS
Re: WebObjects and HTTPS
- Subject: Re: WebObjects and HTTPS
- From: Chuck Hill <email@hidden>
- Date: Thu, 30 Jul 2009 10:56:31 -0700
Hi David,
On Jul 30, 2009, at 10:14 AM, David Holt wrote:
We have been asked to implement a secure form for a client. The wiki
page on using HTTPS with WebObjects implies that you don't need to
set anything in Apache for your site as a whole in order to use SSL
in a particular WO application.
It does?
http://wiki.objectstyle.org/confluence/display/WO/Web+Applications-Development-SSL+requests+via+https+protocol
Seems to show a lot of configuration. AND I will make an educated
guess that your clients will not be OK with the warning messages (or
security level!) of a self-signed certificate. So you will need to
start by purchasing one from Thawte or Verisign for their domain.
These will expire every two or so years and need to be replaced.
Can anyone confirm that all I need to do is follow the example on
the wiki and/or Practical WebObjects and the app will switch to
HTTPS when called from a hyperlink or WOForm submission?
While it is technically not useful, most users will expect the page
the form is on to be secure too, not just the URL it submits to. Once
Apache is setup, in your app you need to redirect, or have the user
click on a link, for an HTTPS URL. Then the reverse to get back out
of HTTPS.
Do I need to enable port 443 on the server for the site as well?
Only if you want HTTPS to work. :-P
http://wiki.objectstyle.org/confluence/display/WO/Web+Applications-Development-SSL+requests+via+https+protocol
Thanks,
David
Chuck
--
Chuck Hill Senior Consultant / VP Development
Learn WO at WOWODC'09 East in Montréal this August!
http://www.wocommunity.org/wowodc09/east
http://arstechnica.com/apple/news/2009/07/webobjects-sliced-from-106but-prognosis-of-death-premature.ars
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden