Installing SSL for a full website on ezpublish

Author Message

Gérard Bouchard

Thursday 24 January 2008 6:03:58 am

Hi all,

I'm working on a web server running ubuntu 7.10 & apache 2.0. This server has one website (based on ezpublish 3.9.2) only.

When you enter the website, the first page asks you to log in (with login/pass). Since I've setup SSL, it's impossible to login. Whatever the login/pass is, the website says that we have a bad username or password.

Here is my config file of the website with the vhosts (apache 2.0) :

NameVirtualHost *:443

<VirtualHost *:80>
	DocumentRoot /var/www/
	ServerName localhost
	Redirect / https://localhost/
</VirtualHost>

<VirtualHost *:443>
	ServerName localhost
	DocumentRoot /var/www/
	SSLEngine on
	SSLCertificateFile /etc/apache2/server.crt
	SSLCertificateKeyFile /etc/apache2/server.key
</VirtualHost>

I edit the /settings/override/site.ini.append.php file, here it is :

<?php 

#?ini charset="utf-8"?

[SiteSettings]
SSLPort=443

[SSLZoneSettings]
SSLZones=enabled

/*
[ExtensionSettings]
ActiveExtensions[]=ezdhtml
ActiveExtensions[]=ezodf

[Session]
SessionNameHandler=custom

[SiteSettings]
DefaultAccess=plain_site
SiteList[]=plain_site
SiteList[]=plain_site_lang2

[SiteAccessSettings]
CheckValidity=false
AvailableSiteAccessList[]=plain_site
AvailableSiteAccessList[]=plain_site_admin
AvailableSiteAccessList[]=plain_site_lang2
MatchOrder=uri
HostMatchMapItems[]

[MailSettings]
Transport=SMTP
TransportServer=SR-INF21.netfective.com
TransportUser=
TransportPassword=
AdminEmail=bluage.support@netfective.com
EmailSender=

[DebugSettings]
DebugOutput=disabled
DebugRedirection=disabled

[TemplateSettings]
Debug=disabled
ShowXHTMLCode=disabled
ShowUsedTemplates=disabled

[DatabaseSettings]
SQLOutput=disabled
SiteAccessList[]=plain_site
SiteAccessList[]=plain_site_admin
SiteAccessList[]=plain_site_lang2
*/ ?>

I just uncommented the first line (which was #?ini charset="utf-8"?) and added the SSL Lines. I want to have SSL for all the pages of the websites, how do I do ? Have I to put all the zones in lines like "ModuleViewAccessMode[user/login]=ssl" (but how to list all the zones ?)

Thanks for your support :)

Regards,

Gérard

Gérard Bouchard

Friday 25 January 2008 12:21:28 am

It's ok, I didn't modify the site.ini file (SSLZones=disabled is marked)
Here is my website config file (apache2.0) :

NameVirtualHost *:443

<VirtualHost *:80>
	DocumentRoot /var/www/
	ServerName localhost
	Redirect / https://localhost/
</VirtualHost>

<VirtualHost *:443>
	ServerName localhost
	DocumentRoot /var/www/
	SSLEngine on
	SSLCertificateFile /etc/apache2/server.crt
	SSLCertificateKeyFile /etc/apache2/server.key
</VirtualHost>

And now, as soon as I enter the website by taping http://localhost/mywebsite, https activates and I can move on all my website based on ezpublish with SSL.

Noicokuna Niemoge

Monday 26 January 2009 12:14:29 am

I've got another problem with ssl. When I enable it, the login redirection redirects me to:

www.mysite.com/index.php?/index.php?/siteaccess/

... is it a known bug?

Shiki soku ze ku...

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.