[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Disabling web-based admin from http, but not https



On Thu, 8 Mar 2001, Lee Sai Fon wrote:

> Hello,
> 
> No joy on my last query, but hopefully someone may have the answer to this 
> one.
> 
> Do you know if it is possible to arrange things so that the cobalt web-based 
> interface is only available via https: and not normal http:?
> 

The magic command you are looking for is SSLRequireSSL
it goes in a <directory> block , add it to the top level .htaccess file in
the adm server space and it should refuse non ssl connections...

This will of course hose all your internal error pages ;)

gsh