Hey!
Suppose I have a linux server where a given networking service is running. This service is listening on a certain port i.e. 80 for incoming connections and is serving HTTP content - it has a built-in HTTP server. The application does not support secure connections. Is there a way in linux to enable SSL/TLS secure connections for applications that don't natively support it?


Here's what I'm doing:
I'm building a video surveillance device from various components - I disassembled an HD webcam, a TP-LINK TL-MR3020 router, and installed them in a "fake outdoor camera" housing to build a real IP cam. The TL-MR3020 router is flashed with OpenWRT Barrier Breaker firmware, and is offering videostream content via the ethernet port. I am using mjpg_streamer that has a built-in http server, but it does not support SSL. I would like to access such content over a secure connection. Is this possible?

Any suggestions?


Kind regards,
~displace

Yes. Run an http service i suppose mod proxy can work too. Then use mod_rewrite to change the service to accept only https connections.

Sorry i am not of more help but today was a long day and hitting some cans of beer.

Anyhow you want something like this.

http://acespritechblog.wordpress.com...-ubuntu-12-04/

Check apache config. Openerp runs as a perl script i think it was, but strange port. I still have the vm, i will try to boot it over the weekend and show my scripts more or less.

mod_rewrite... that sounds like apache to me. I'm running OpenWRT here, so installing apache on it would be an overkill. Is there something more lightweight? It would probably have to be a proxy, but TBH I haven't used any proxies yet, so I'm mostly swimming in unfamiliar waters. Next I'll also have to block access to the unsecured port, but I take it this can easily be done with iptables.

Yes. I read your post with my eyes glued to my bum.

Sorry. Am talking about apache. But, the only way i am aware of doing what you request is by rewriting the url or using a proxy in order to force https. Maybe with wrt you can get into the configs and do something from there. If not you will need some extra hardware or services somewhere.

I had a look at their website and your system supports many httpd servers. Is it possible to maybe change to a more widely used httpd service?

You might find these links useful.

http://wiki.openwrt.org/doc/howto/http.overview

http://wiki.openwrt.org/doc/howto/http.overview

But essentially you are looking for setting up a reverse proxy. You then would use a virtual host and the incomming connections connecting to it are accepted on https. You can do that on most servers I would assume.

So figure out what http server you use, and there would likely be a ssl reverse proxy guide for it.