[otrs] using https

[Steve Clark]

Marius Flage wrote:
> Steve Clark skrev:
> 
> 
>>Does anyone have documentation on the steps necessary to use https for
>>OTRS. I saw in sysconfig an option for https - but I know changes have 
>>to be
>>made in the apache config as well as making a certificate.
> 
> 
> Just look at the apache documentation for enabling SSL. It's all down to 
> that. The only thing in the OTRS configuration is about generating of 
> the URLs.
> 
> Here's my configuration:
> 
> # ls -l /etc/apache2/sites-available/
> total 4
> -rw-r--r-- 1 root root 1160 2007-10-16 11:49 default
> lrwxrwxrwx 1 root root   43 2007-10-19 11:27 <hostname> -> 
> /var/vhosts/<hostname>/etc/apache2.conf
> lrwxrwxrwx 1 root root   47 2007-10-19 13:41 <hostname>.ssl -> 
> /var/vhosts/<hostname>/etc/apache2.ssl.conf
> 
> Relevant configuration files:
> 
> # cat /var/vhosts/<hostname>/etc/apache2.conf
> <VirtualHost *>
>          ServerName <hostname>
>          DocumentRoot /var/vhosts/<hostname>/htdocs
>          ErrorLog /var/vhosts/<hostname>/log/error.log
>          CustomLog /var/vhosts/<hostname>/log/access.log combined
>          RedirectMatch ^/otrs/$ https://<hostname>/otrs/
>          RedirectMatch ^/$ https://<hostname>/otrs/
> </VirtualHost>
> 
> # cat /var/vhosts/<hostname>/etc/apache2.ssl.conf
> NameVirtualHost *:443
> <VirtualHost *:443>
>      ServerName <hostname>:443
>      DocumentRoot /var/vhosts/<hostname>/htdocs/
>      CustomLog /var/vhosts/<hostname>/log/access.log combined
>      ErrorLog /var/vhosts/<hostname>/log/error.log
>      SSLEngine on
>      SSLCipherSuite 
> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
>      SSLCertificateFile /var/vhosts/<hostname>/etc/ssl/apache.pem
>      RedirectMatch ^/$ /otrs/
> </VirtualHost>
> 
> /var/vhosts/<hostname>/etc/ssl/apache.pem contains the self-signed 
> certificate.
> 
> That should be it :) Of course make sure you have the relevant modules 
> for apache loaded. I use mod_ssl.
> 
> Marius
> _______________________________________________
> OTRS mailing list: otrs - Webpage: http://otrs.org/
> Archive: http://lists.otrs.org/pipermail/otrs
> To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
> Support or consulting for your OTRS system?
> => http://www.otrs.com/
> 
> 
Thanks - I was also wondering in admin->sysconfig->core there is a 
selection for http/https
what does it do?