Newbie: Trying to ssl-wrap Plone4 using non-standard port
Johannes Graumann
johannes_graumann at web.de
Tue Sep 28 22:20:54 MSD 2010
Igor Sysoev wrote:
> On Tue, Sep 28, 2010 at 07:17:13PM +0200, Johannes Graumann wrote:
>
>> Hello,
>>
>> I have a domain (www.graumannschaft.org) that points to a non-standard
>> ssl- port on a server I rent (h1616679.stratoserver.net:442), as 443 is
>> taken by an unrelated Apache instance.
>> The server now hold a virgin buildout of Plone4, listening on 8080.
>> I want to wrap that zope/plone cnnetion into ssl using NGINX and hsve so
>> fa the following:
>>
>> server {
>> listen 442;# Custom port as the standard 443 is taken by kolab
>> server_name www.graumannschaft.org;
>> # SSL is using KOLAB generated credentials
>> ssl on;
>> ssl_certificate /kolab/etc/kolab/cert.pem;
>> ssl_certificate_key /kolab/etc/kolab/key.pem;
>> ssl_session_timeout 5m;
>> ssl_protocols SSLv3 TLSv1;
>> ssl_ciphers
>> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
>> ssl_prefer_server_ciphers on;
>> location / {
>> proxy_pass http://localhost:8080;
>> }
>> }
>>
>> This gets me to Plone4's "Plone is up and running. * Your Plone site has
>> not been added yet ..." age just fine, but clicking the button "Create a
>> new Plone Site" redirects me to localhost:8080, which unsurprisingly
>> doesn't work.
>> I'm obviously lacking rewriting, but whatever I have tried along the
>> lines of googled examples (which mostly rely n already up and running
>> plone sites and plone's VirtulHostMonster), has not worked.
>>
>> Can someone lease nudge me into the right direction?
>
> location / {
> proxy_pass http://localhost:8080;
> proxy_redirect http://localhost:8080/ /;
> }
>
Thanks! I have now
server {
listen 442;# This is a custom port as the standard 443 is taken by kolab
server_name www.graumannschaft.org h1616679.stratoserver.net;
# SSL is using KOLAB generated credentials
ssl on;
ssl_certificate /kolab/etc/kolab/cert.pem;
ssl_certificate_key /kolab/etc/kolab/key.pem;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3 +EXP;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://localhost:8080;
proxy_redirect http://localhost:8080/ /;
}
}
But when trying to move on from plone's default start page (at
https://h1616679.stratoserver.net:442/), I still end at
http://localhost:8080/@@plone-addsite?site_id=Plone, which keeps not working
...
Thanks for any hint, Joh
More information about the nginx
mailing list