[ EN ]    [ DE ]   
kOOL Logo HomeAboutDownloadDevelopmentDocumentation
Rects
Download

  SSL encryption for kOOL

You should be using SSL encryption for your kOOL installation, to protect your data on its journey through the network/internet.

The details of installing and handling an SSL encrypted webpage is beyond the scope of this instructions. Check the documentations and mailinglist of your webserver. For apache you find some information on www.modssl.org

SSL certificates

You can use any SSL certificates, you can buy from Thawte, VeriSign etc. But you can also create and sign your own server certificates. A good documentation on how to do this can be found here:

www.debian-administration.org/articles/284

SSL with mod_ssl for apache

If you use mod_ssl for apache, the following hints and configurations might be helpful to you.

SSL with virtual hosts

If you can't or don't want to assign a separate ip to every kOOL installation on your server, you can still use SSL encryption for every virtual host by using different ports. The following configuration shows a possible setup with a permanent redirect to the https url.

 

Make apache listen on port 80 AND 1443

Listen 80

<IfModule mod_ssl.c>
  Listen 1443

</ifModule>

 

Add a permanent redirect to the https url

<VirtualHost ip.of.your.server:80>
  ServerName your.kool.com
  Redirect permanent / https://your.kool.com:1443
</VirtualHost>

 

Add the SSL settings to your virtual host configuration

<IfModule mod_ssl.c>
  <VirtualHost ip.of.your.server:1443>
    ServerAdmin webmaster@your.kool.com
    DocumentRoot /var/www/kOOL_demo
    ServerName your.kool.com
    ScriptAlias /fileshare/cgi/ /var/www/kOOL_demo/fileshare/cgi/

    SSLEngine on
    SSLCertificateFile /etc/apache/ssl.crt/kOOL-demo.cert.pem
    SSLCertificateKeyFile /etc/apache/ssl.key/kOOL-demo.key.pem

  </VirtualHost>

</IfModule>

Rects
©Renzo Lauper, CH-5000 Aarau, All rights reserved