Hello there!
I build last year a dynamic SSL encryprion engine, which makes it possible to encrypt serveral sites via SSL. For this feature is it necasary to have an SSL certificate via openSSL (when you're driving a apache) for example.
If send this enhancement in the last year to Oliver. He will make the feature finally in phpwcms a few week for as I know (you allready see the "SSL" sites in sites properties since two releases).
This post is only for your information that you're know what is going up and do eventually double work...
Cheers form "electing" Hamburg,
Florian
dynamic SSL encryption for sites
Hi guys,
I now need to know why what where when?
would anyone plese explain the uses and benefits of SSL to me (regarding its use within phpwcms)
what benefit is there for having a page use SSL? is it only usefull sending form data?
I now need to know why what where when?
would anyone plese explain the uses and benefits of SSL to me (regarding its use within phpwcms)
what benefit is there for having a page use SSL? is it only usefull sending form data?
Last edited by pSouper on Fri 23. Jul 2004, 16:19, edited 1 time in total.
Hey pSouper,
regarding to your first question I couldn't answer. I don't know what's the metter with the engine or why it didn't has been integrated yet. As you could read in my posting below the tecnical part has been done in December 2003. So maybe Oliver could help us by answering this question.
Now I'll answer your second question in a few words about the basics (SSL is a lot more complex topic so I would recomend that you're trying google for more tecnical details).
SSL (SecureSocketLayer) is very important for the privacy of data beeing sended over the web. SSL alows you and the user to encrypt and decrypt data by a certificate which has a public key and a private-key (similar to PGP). By each connection the user establish to your SSL-encrypted page, theres a new key gererated for the encryption (ref. technical descrpt. of Netscape http://developer.netscape.com/tech/secu ... works.html).
Normaly you should (or better MUST) use SSL pages only by transactions over the internet or by filling out forms, which containing privacy data (ex. Loginforms).
I bulid the solutions for wcms as follows: Theres a line within the setup process of phpwcms where you could enter some data about the config of your SSL certificate running on the server (esp. Port (norm. 443)). In the admin --> site structure dialog you can edit at a checkbox in the properties dialog. When you're now accessing the page in the frontend the user gets a "port redirect" (he won't regonize because the port is changing from 80 (HTTP) to 443(SSL) by default only) and the user can see the small lock at the bottom of his browser. When he leaves the page to another page within your site which has not to be SSL encrypted the same procedur as discribed happends other way around. Thats all.
If you've got more questions, feel free to post here
Cheers,
Florian
regarding to your first question I couldn't answer. I don't know what's the metter with the engine or why it didn't has been integrated yet. As you could read in my posting below the tecnical part has been done in December 2003. So maybe Oliver could help us by answering this question.
Now I'll answer your second question in a few words about the basics (SSL is a lot more complex topic so I would recomend that you're trying google for more tecnical details).
SSL (SecureSocketLayer) is very important for the privacy of data beeing sended over the web. SSL alows you and the user to encrypt and decrypt data by a certificate which has a public key and a private-key (similar to PGP). By each connection the user establish to your SSL-encrypted page, theres a new key gererated for the encryption (ref. technical descrpt. of Netscape http://developer.netscape.com/tech/secu ... works.html).
Normaly you should (or better MUST) use SSL pages only by transactions over the internet or by filling out forms, which containing privacy data (ex. Loginforms).
I bulid the solutions for wcms as follows: Theres a line within the setup process of phpwcms where you could enter some data about the config of your SSL certificate running on the server (esp. Port (norm. 443)). In the admin --> site structure dialog you can edit at a checkbox in the properties dialog. When you're now accessing the page in the frontend the user gets a "port redirect" (he won't regonize because the port is changing from 80 (HTTP) to 443(SSL) by default only) and the user can see the small lock at the bottom of his browser. When he leaves the page to another page within your site which has not to be SSL encrypted the same procedur as discribed happends other way around. Thats all.
If you've got more questions, feel free to post here
Cheers,
Florian
Hi Florian,
this would be a cool feature. Maybe it is implemented with the front end users ...
cu
this would be a cool feature. Maybe it is implemented with the front end users ...
cu
ParaDroid
knquadrat edv + marketing
http://www.knquadrat.de
phpWCMS Dokumentation | Deutsch | English
knquadrat edv + marketing
http://www.knquadrat.de
phpWCMS Dokumentation | Deutsch | English
Hi florian,
is it right that the ssl feature is still not included?
means not working yet?
I installed a ssl cerfification, edited the config.inc.php, made a selection on the structure level, but when i open the page it is not safe.
Thank you for a hint.
is it right that the ssl feature is still not included?
means not working yet?
I installed a ssl cerfification, edited the config.inc.php, made a selection on the structure level, but when i open the page it is not safe.
Thank you for a hint.
Gruß/ regards cyrano
--------------------------------------------------------
templates -> http://www.128.weitzelmedia.de
planepix -> http://www.planepix.de
XING -> https://www.xing.com/profile/Thomas_Weitzel3
--------------------------------------------------------
templates -> http://www.128.weitzelmedia.de
planepix -> http://www.planepix.de
XING -> https://www.xing.com/profile/Thomas_Weitzel3
thanks Florian for the explanation (and your involment).
I didn't realise despite all the apearance of SSL in phpWCMS it may still not be implemented.(i will install and look for the 'lock icon' in my browser for a indication)
I guess this only really applied to pages with forms on them (in passwords etc) and not needed for any other pages.
I didn't realise despite all the apearance of SSL in phpWCMS it may still not be implemented.(i will install and look for the 'lock icon' in my browser for a indication)
I guess this only really applied to pages with forms on them (in passwords etc) and not needed for any other pages.