[cobalt-users] FrontPage, SSL, Secure Authoring, Secure Forms

["Ray Symons" <lists@xxxxxxxxxxxx>]

Just wanted to pass on something real quick that I hadn't run across here before
and might be of interest to anyone looking for a bit more security with
FrontPage webs.

Within FrontPage, there is an option in the Publish Web dialog that can be
checked, "Secure connection required (SSL)."  There *is* a way to use this on
the RaQ and force a user to only use SSL when publishing or authoring their
FrontPage web.

First the web must have a certificate, self-signed works fine.

Next, the following line needs to be added to the
/usr/local/frontpage/www.domain.tld:80.cnf file:

    RequireSSL:enabled

Then, the entire file needs to be copied within the /usr/local/frontpage
directory so there is a copy for port 443 also:

    mv www.domain.tld:80.cnf www.domain.tld:443.cnf

Once you do the above, the user will no longer be able to open that web directly
from the server, nor publish from their local hard drive *unless* they use
https://www.domain.tld.

The added benefit is the www.domain.tld:443.cnf file will also enable that
FrontPage web so that SSL can be used to create secure connections for forms,
etc., not to mention, the user can also then access their _private directory via
a secure connection.


rks