Arne Kepp ha scritto: > I was wondering whether we could generate a hostname on startup, like > SSH. However, I dont think you want a certificate without a fully > qualified hostname, and asking the operating systems is probably not > accurate in most cases. So that leaves prompting the user during startup.
That would have to be the work of the installer. GeoServer is runnig inside a web container, and it's the web container's job to do the SSL. GeoServer by itself cannot do anything to influence the enviroment in which it's running. > I'd also like to point out again that a lot of users will do the HTTPS > part using an Apache proxy, or a dedicated daemon like Pound. Partially > because you should trust as few programs as possible with the key. So it > should be possible to force redirection to HTTPS even when the container > does not support SSL. Meaning that... we need to configure where the redirection is going somehwere in the container? Like, having the admin provide us with a base url for https based calls, comprised of hostname, port, and eventually a path? (a https replacement for the http://host:8080/geoserver portion of the url?) Cheers Andrea ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ Geoserver-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/geoserver-devel
