dynamic SSL encryption for sites

Post custom hacks and enhancements for phpwcms here only. Maybe some of these things will be included in official release later.
Post Reply
Florian
Posts: 119
Joined: Wed 19. Nov 2003, 16:50
Location: Hamburg
Contact:

dynamic SSL encryption for sites

Post by Florian »

Hello there!

I build last year a dynamic SSL encryprion engine, which makes it possible to encrypt serveral sites via SSL. For this feature is it necasary to have an SSL certificate via openSSL (when you're driving a apache) for example.
If send this enhancement in the last year to Oliver. He will make the feature finally in phpwcms a few week for as I know (you allready see the "SSL" sites in sites properties since two releases).
This post is only for your information that you're know what is going up and do eventually double work... 8)

Cheers form "electing" Hamburg,
Florian
User avatar
pSouper
Posts: 1552
Joined: Tue 11. Nov 2003, 15:45
Location: London
Contact:

Post by pSouper »

Hi guys,
I now need to know why what where when?

would anyone plese explain the uses and benefits of SSL to me (regarding its use within phpwcms)

what benefit is there for having a page use SSL? is it only usefull sending form data?
Last edited by pSouper on Fri 23. Jul 2004, 16:19, edited 1 time in total.
Florian
Posts: 119
Joined: Wed 19. Nov 2003, 16:50
Location: Hamburg
Contact:

Post by Florian »

Hey pSouper,

regarding to your first question I couldn't answer. I don't know what's the metter with the engine or why it didn't has been integrated yet. As you could read in my posting below the tecnical part has been done in December 2003. So maybe Oliver could help us by answering this question.

Now I'll answer your second question in a few words about the basics (SSL is a lot more complex topic so I would recomend that you're trying google for more tecnical details).
SSL (SecureSocketLayer) is very important for the privacy of data beeing sended over the web. SSL alows you and the user to encrypt and decrypt data by a certificate which has a public key and a private-key (similar to PGP). By each connection the user establish to your SSL-encrypted page, theres a new key gererated for the encryption (ref. technical descrpt. of Netscape http://developer.netscape.com/tech/secu ... works.html).
Normaly you should (or better MUST) use SSL pages only by transactions over the internet or by filling out forms, which containing privacy data (ex. Loginforms).
I bulid the solutions for wcms as follows: Theres a line within the setup process of phpwcms where you could enter some data about the config of your SSL certificate running on the server (esp. Port (norm. 443)). In the admin --> site structure dialog you can edit at a checkbox in the properties dialog. When you're now accessing the page in the frontend the user gets a "port redirect" (he won't regonize because the port is changing from 80 (HTTP) to 443(SSL) by default only) and the user can see the small lock at the bottom of his browser. When he leaves the page to another page within your site which has not to be SSL encrypted the same procedur as discribed happends other way around. Thats all.

If you've got more questions, feel free to post here :D

Cheers,
Florian
User avatar
Paradroid
Posts: 176
Joined: Fri 19. Mar 2004, 13:14
Location: Wuppertal
Contact:

Post by Paradroid »

Hi Florian,

this would be a cool feature. Maybe it is implemented with the front end users ...

cu
ParaDroid

knquadrat edv + marketing
http://www.knquadrat.de

phpWCMS Dokumentation | Deutsch | English
cyrano
Posts: 1598
Joined: Sat 31. Jan 2004, 18:33
Location: Stuttgart
Contact:

Post by cyrano »

Hi florian,

is it right that the ssl feature is still not included?
means not working yet?

I installed a ssl cerfification, edited the config.inc.php, made a selection on the structure level, but when i open the page it is not safe.

Thank you for a hint.
Gruß/ regards cyrano
--------------------------------------------------------
templates -> http://www.128.weitzelmedia.de
planepix -> http://www.planepix.de
XING -> https://www.xing.com/profile/Thomas_Weitzel3
User avatar
pSouper
Posts: 1552
Joined: Tue 11. Nov 2003, 15:45
Location: London
Contact:

Post by pSouper »

thanks Florian for the explanation (and your involment).

I didn't realise despite all the apearance of SSL in phpWCMS it may still not be implemented.(i will install and look for the 'lock icon' in my browser for a indication)

I guess this only really applied to pages with forms on them (in passwords etc) and not needed for any other pages.
ehoeven
Posts: 3
Joined: Thu 12. Feb 2004, 10:41
Location: The Haque
Contact:

Post by ehoeven »

Almost a year later.. is there any new information on using SSL with phpWCMS? I'm really interested in de enhancement 'cause i'd like to use it on the admin part of the website as well as some forms.

t.i.a. Edwin
Post Reply