secure http

sanjibgupta · 09-08-2005, 02:24 AM

I have a webserver where the http directory is /var/www/html. It opens in port 80. Can i setup another directory /var/www/html/secure which can only be open by https(443). If so where should i make the change.
SAnjib Gupta

sin · 09-08-2005, 03:06 AM

assuming your using apache with mod_ssl

edit the DocumentRoot settiing in /etc/apache/mod_ssl.conf

sanjibgupta · 09-08-2005, 06:24 AM

thanks
it is working fine

Sanjib Gupta

stickman · 09-13-2005, 12:22 PM

You might want to reconsider having your HTTPS content as a subdirectory of your HTTP content.

TruckStuff · 09-14-2005, 09:01 AM

Quote:

Originally posted by stickman
You might want to reconsider having your HTTPS content as a subdirectory of your HTTP content.

To elaborate on what he said, if you SSL DocumentRoot is a subdirectory of your HTTP DocumentRoot, any SSL page can be viewed over non-SSL connections by simply changing the URL.

For example, suppose your HTTP DocumentRoot is set to /var/www/html and your SSL DocumentRoot is set to /var/www/html/ssl, you would view a page over SSL by typing in https://server.domain.com/foo.html. However, you could also view the same page over a non-SSL connection by pointing your browser to http://server.domain.com/ssl/foo.html. Sort of defeats the purpose...