Page 1 of 1

HTTPS/SSL

PostPosted: Sun Sep 17, 2017 6:25 pm
by runout
summitpost.org does not have HTTPS/SSL support. https://www.summitpost.org
Please change this soon as we login with passwords which should be transferred over an encrypted connection.

To implement this change and enforce HTTPS is really easy and with letsencrypt certificates it does not cost anything.

thanks!

Re: HTTPS/SSL

PostPosted: Mon Sep 18, 2017 1:08 pm
by Josh Lewis
Indeed LetsEncrypt works quite well for TSL. :D SP uses Varnish caching which you can imagine had a road block in accordance to their FAQ: https://varnish-cache.org/docs/trunk/phk/ssl.html

Fortunately people have worked around this problem over the years. Here's one solution that is relevant to SP's OS: https://www.digitalocean.com/community/ ... untu-14-04

Re: HTTPS/SSL

PostPosted: Mon Sep 18, 2017 1:27 pm
by runout
Ok, varnish...
But then ist's easy to do SSL on a SSL-offloading-proxy.
I do this on my servers anyways using a seperate VM for this.
If you need help - let me know.

see:
https://komelin.com/articles/https-varnish