Re: WebObjects and HTTPS
Re: WebObjects and HTTPS
- Subject: Re: WebObjects and HTTPS
- From: David Holt <email@hidden>
- Date: Thu, 30 Jul 2009 11:57:05 -0700
Thanks for the replies, it confirms that my understanding of HTTPS
was incomplete.
On 30-Jul-09, at 10:56 AM, Chuck Hill wrote:
Hi David,
On Jul 30, 2009, at 10:14 AM, David Holt wrote:
We have been asked to implement a secure form for a client. The
wiki page on using HTTPS with WebObjects implies that you don't
need to set anything in Apache for your site as a whole in order
to use SSL in a particular WO application.
It does?
http://wiki.objectstyle.org/confluence/display/WO/Web+Applications-
Development-SSL+requests+via+https+protocol
Seems to show a lot of configuration. AND I will make an educated
guess that your clients will not be OK with the warning messages
(or security level!) of a self-signed certificate. So you will
need to start by purchasing one from Thawte or Verisign for their
domain. These will expire every two or so years and need to be
replaced.
Hey, we're more trustworthy than them :-)
Can anyone confirm that all I need to do is follow the example on
the wiki and/or Practical WebObjects and the app will switch to
HTTPS when called from a hyperlink or WOForm submission?
While it is technically not useful, most users will expect the page
the form is on to be secure too, not just the URL it submits to.
Once Apache is setup, in your app you need to redirect, or have the
user click on a link, for an HTTPS URL. Then the reverse to get
back out of HTTPS.
Do I need to enable port 443 on the server for the site as well?
Only if you want HTTPS to work. :-P
Yeah I see the configuration for 443 now. It was hidden at the end of
one of those big red arrows.
David
http://wiki.objectstyle.org/confluence/display/WO/Web+Applications-
Development-SSL+requests+via+https+protocol
Thanks,
David
Chuck
--
Chuck Hill Senior Consultant / VP Development
Learn WO at WOWODC'09 East in Montréal this August!
http://www.wocommunity.org/wowodc09/east
http://arstechnica.com/apple/news/2009/07/webobjects-sliced-
from-106but-prognosis-of-death-premature.ars
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden