Arne Kepp ha scritto:
> I was wondering whether we could generate a hostname on startup, like 
> SSH. However, I dont think you want a certificate without a fully 
> qualified hostname, and asking the operating systems is probably not 
> accurate in most cases. So that leaves prompting the user during startup.

That would have to be the work of the installer. GeoServer is runnig
inside a web container, and it's the web container's job to do
the SSL. GeoServer by itself cannot do anything to influence the
enviroment in which it's running.

> I'd also like to point out again that a lot of users will do the HTTPS 
> part using an Apache proxy, or a dedicated daemon like Pound. Partially 
> because you should trust as few programs as possible with the key. So it 
> should be possible to force redirection to HTTPS even when the container 
> does not support SSL.

Meaning that... we need to configure where the redirection is going
somehwere in the container? Like, having the admin provide us with
a base url for https based calls, comprised of hostname, port,
and eventually a path? (a https replacement for the
http://host:8080/geoserver portion of the url?)

Cheers
Andrea

------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to