Thread: SSL

    #1
  1. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    Paris
    Posts
    6
    Rep Power
    0

    Question


    I want to secure my site with SSL encryption.

    After installing SSL modules on Apache, what Have I to do in my PHP site to use this SSL connexion???

    Thanx for help
  2. #2
  3. No Profile Picture
    Seņor Member
    Devshed Beginner (1000 - 1499 posts)

    Join Date
    Aug 2000
    Posts
    1,157
    Rep Power
    38
    Have you purchased a certificate (e.g.: from VeriSign)?
    Michael
  4. #3
  5. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    4
    Rep Power
    0
    You don't need to buy the cert at all. You can create your self-signed certs if that's what you wanted.
  6. #4
  7. yet another member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Posts
    262
    Rep Power
    14
    Hi!

    ovigneron,
    I was told that using SSL you best make all links (php generated ones, too) absolute with https::// prefix .

    Using relative links (like "../index.html", or even "/index.html") on securely transmitted pages is said to make some browsers request the linked pages without encryption. Therefor you should always tell the browsers (by saying "https://www.server.com/index.html") to retrieve the link securely .


    btw, freebsd is right. the only disadvantage of a self signed (and self generated) key is that the browser won't recognize the signer (which it would were it VeriSign), and ask your visitor whether she/he decides to trust the key. In my opinion this is no problem at all for a low profile site (in case you're running one... no insult intended here ) compared to $$300.


    Greetings

    Atrus.
  8. #5
  9. No Profile Picture
    Seņor Member
    Devshed Beginner (1000 - 1499 posts)

    Join Date
    Aug 2000
    Posts
    1,157
    Rep Power
    38
    Could you guys clue me in on self-signing? A URL on where I could read more would suffice.
    Michael
  10. #6
  11. yet another member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Posts
    262
    Rep Power
    14
    Hi!

    I did this quite a while ago and I only remember having done the job with openssl and mod_ssl tools.

    On a quick glance I found this:

    http://www.openssl.org/docs/apps/CA.pl.html

    It's a man page for one of the openssl tools on creating keys and making certs (signing and stuff).


    Greetings

    Atrus.
  12. #7
  13. No Profile Picture
    Seņor Member
    Devshed Beginner (1000 - 1499 posts)

    Join Date
    Aug 2000
    Posts
    1,157
    Rep Power
    38
    Thanks! That's exactly what I was looking for.
    Michael

IMN logo majestic logo threadwatch logo seochat tools logo