Security concerns on HTTP WAN side

[Jocko]

Do you mean enable connexion over TLS/SSL protocol with port 81 ?

To do it add these lines within the VirtualHost directive after ServerName line:

Code: Select all

<IfModule !mod_headers.c>
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
</IfModule>

SSLEngine on

SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5

SSLCertificateFile /rw_fs/etc/ssl/fvdwsl.crt
SSLCertificateKeyFile  /rw_fs/etc/ssl/fvdwsl.key

SSLOptions +OptRenegotiate

<FilesMatch "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars +OptRenegotiate
</FilesMatch>

SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

As some other lines are also required (at the server level), you must enable https in the main setup menu (but it seems that you already did it)

Please to note you can no longer use http on this port after adding these lines.

[raidsm]

:applause Great! :woohoo it's working perfectly, I must tell you that I'm quite impressed! :hail

I've just read some information regarding virtual hosts using HTTPS and I was in the impression it couldn't be possible. My only hope was that it may be possible because I only have on virtual host but as I'm a complete noob, I don't quite understand every bit of it. Just that I use the same certificate that the FVDW config page is using.

Thanks again! :hail :beer:

[raidsm]

oh my... here's another one... :shocked

But it should be an easy one. :?

If I disable the ssl (port 443) on the fvdw web server or if I change the default ssl port , can I then use the default ssl port for my virtual host?

[Jocko]

Hi raidsm,

You need to keep enable the https option as some directive lines are required at the server level if you want to have https on your wp port.

Yes, you can select another port for the main Web server and reuse the port 443 for your wp server.