Difference between revisions of "Secure App Access"
From Amahi Wiki
Line 18: | Line 18: | ||
{{Code|cd /etc/httpd/conf.d/}} | {{Code|cd /etc/httpd/conf.d/}} | ||
* Edit it to like this: | * Edit it to like this: | ||
− | {{Code| | + | {{Code|<VirtualHost *:443> |
− | |||
ServerName ajaxplorer | ServerName ajaxplorer | ||
ServerAlias username.yourhda.com | ServerAlias username.yourhda.com | ||
Line 36: | Line 35: | ||
</Directory> | </Directory> | ||
− | </VirtualHost | + | </VirtualHost>}} |
− | |||
* Finaly create a file called 1026-ajaxplorerhttp.conf (note that the number may change for you) and put in this (also change things like the website name and etc): | * Finaly create a file called 1026-ajaxplorerhttp.conf (note that the number may change for you) and put in this (also change things like the website name and etc): | ||
{{Code|<pre> | {{Code|<pre> |
Revision as of 03:16, 9 August 2011
WARNING | |
---|---|
This is recommended only for advanced users, proceed with caution. |
This is an example of how to force an app access via https. For this example, AjaXplorer will be used but this will work with any app.
- Go to your config file for apache:
bash code |
---|
cd /etc/httpd/conf
|
- Now it is time to create a key and a crt. It will ask you a few questions, just make sure that the Common Name is the domain name:
bash code |
---|
openssl genrsa -out filename.key 1024 openssl req -new -key filename.key -x509 -days 1000 -out filename.crt
|
- Next open up httpd.conf with you favorite editor and add the following to the end:
Text |
---|
NameVirtualHost *:443
|
- Open terminal and do (needed by apache to make this work):
bash code |
---|
yum -y install mod_ssl
|
- Find the file that has ajaxplorer in its name:
bash code |
---|
cd /etc/httpd/conf.d/
|
- Edit it to like this:
bash code |
---|
<VirtualHost *:443> ServerName ajaxplorer ServerAlias username.yourhda.com SSLEngine On SSLCertificateFile /etc/httpd/conf/filename.crt SSLCertificateKeyFile /etc/httpd/conf/filename.key DocumentRoot /var/hda/web-apps/ajaxplorer/html <Directory "/var/hda/web-apps/ajaxplorer/html"> Options Indexes FollowSymLinks +ExecCGI AddHandler fcgid-script .fcg AllowOverride AuthConfig Order allow,deny Allow from all </Directory> </VirtualHost>
|
- Finaly create a file called 1026-ajaxplorerhttp.conf (note that the number may change for you) and put in this (also change things like the website name and etc):
bash code |
---|
'"`UNIQ--pre-00000006-QINU`"'
|
- Now you need to restart apache:
bash code |
---|
service httpd restart
|
And that's all, you now have 128 bit encryption for ajaxplorer.