LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices



Reply
 
Search this Thread
Old 11-27-2002, 03:30 PM   #1
pk21
Member
 
Registered: Jun 2002
Location: Netherlands - Amsterdam
Distribution: RedHat 9
Posts: 549

Rep: Reputation: 30
Question https???


Can anyone advise me some site's or documents about https???

I want my statistics on my website only to be reached by https but dont know how.
 
Old 11-27-2002, 03:51 PM   #2
markus1982
Senior Member
 
Registered: Aug 2002
Location: Stuttgart (Germany)
Distribution: Debian/GNU Linux
Posts: 1,467

Rep: Reputation: 46
Going through the hassle of installing a HTTPS server just for the sake to keep your statistics more secure? Well first of all you need a valid HTTPS certificate ... is it really worth the money ?
 
Old 11-27-2002, 04:03 PM   #3
pk21
Member
 
Registered: Jun 2002
Location: Netherlands - Amsterdam
Distribution: RedHat 9
Posts: 549

Original Poster
Rep: Reputation: 30
money?
It should be possible without any money, right???
 
Old 11-27-2002, 04:51 PM   #4
stickman
Senior Member
 
Registered: Sep 2002
Location: Nashville, TN
Posts: 1,552

Rep: Reputation: 53
Yes, it's definitely possible without spending any money on a cert. You can generate a self signed cert using OpenSSL, and you can setup https service using mod_ssl with Apache.
 
Old 11-28-2002, 11:40 AM   #5
markus1982
Senior Member
 
Registered: Aug 2002
Location: Stuttgart (Germany)
Distribution: Debian/GNU Linux
Posts: 1,467

Rep: Reputation: 46
Well this is no real HTTPS then since the certificate is not 100% valid is it? Doesn't certificates have special authorities they need to be signed with ?
 
Old 11-28-2002, 12:01 PM   #6
bladewalker
Member
 
Registered: Nov 2002
Location: UK
Distribution: Redhat 8
Posts: 30

Rep: Reputation: 15
The concept behind https is encryption of data to provide a secure link to send data down - the certificate is to verify that you are connecting to who you think you are - for example a bank:

The bank runs https and a webserver for an online banking service.
Your unscrupulous friend sets up a duplicate site and server on his machine to try to get your bank details then redirects your request to his machine

How do you validate which server you are connecting to - answer the bank will have a security certificate in its name and it will be signed - your friends will not have this so you can identify the rouge site.

For my final year uni project i have set up an SSL server using Apache modules - I use a self signed certificate for that it runs without errors and provides the security of ssl for my members areas etc which is a requirement of my project spoecification...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
https:// wwnexc Linux - Software 3 11-06-2005 12:57 AM
https rocketgo Linux - Newbie 9 12-29-2003 09:25 PM
https? rocketgo Linux - General 1 11-12-2003 09:22 PM
https spank Linux - Newbie 3 10-25-2003 03:08 PM
https Greg21 Slackware 2 06-20-2003 11:12 PM


All times are GMT -5. The time now is 03:39 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration