[Building Sakai] Sakai with SSL

[Hedrick Charles]

in sakai.properties, 

serverUrl=https://sakai.rutgers.edu

Any URL that will be presented to the user needs to be https:.

Since you're doing SSL decoding in your load balancer, connections come in as normal HTTP. But the software needs to think it is SSL or URLs constructed for users will be wrong.

    <Connector port="80" protocol="HTTP/1.1"
               connectionTimeout="20000"
               scheme="https" secure="false" proxyPort="443"
               maxThreads="2000" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false"  acceptCount="100" URIEncoding="UTF-8"
	       disableUploadTimeout="true" maxHttpHeaderSize="8192" />

Note the scheme="https". When the code constructs a URL for the user, that's what it will use.


On Jan 8, 2013, at 10:11:29 AM, Bogdan Mariesan <Bogdan.Mariesan at isdc.eu> wrote:

> Hi,
>  
> We are having some problems in configuring our Sakai environment to work with SSL and I was wondering if any of you have a similar configuration as the one we use.
> I’ve attached a PDF with our current network configuration.
>  
> Please let me know if any of you have a similar configuration and if possible provide some hints on how to properly configure our system.
>  
> With kind regards,
>  
> Bogdan Marieșan                                 
> Developer
>  
> T / +40 (0)364 403 900
> T / +31 (0)35 629 39 59
> Bogdan.Mariesan at isdc.eu
>  
> <image001.png>
>  
> AVRAM IANCU 506-508 – 407280 FLORESTI
> CLUJ - ROMANIA
> WWW.ISDC.EU
>  
> Bogdan Marieșan recommends the ISDC E-Zine 
>  
> Please consider the environment before printing. 
> The content of this communication is classified as ISDC Confidential and Proprietary Information. The content of this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this communication then delete it from your system. ISDC does not guarantee that the integrity of this communication has been maintained nor that this communication is free of viruses, interceptions or interference. We appreciate your assistance in preserving the confidentiality of our correspondence. Thank you. 
>  
> <www5.pdf>_______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130108/2e9aca5a/attachment.html