See
https://wiki.list.org/DOC/4.27%20Securing%20Mailman%27s%20web%20GUI%20by%20using%20Secure%20HTTP-SSL%20%28HTTPS%29
Summary: set DEFAULT_URL_PATTERN to use https and run 'withlist -l -r
fix_url <list>" with every list.
On 2022-06-21 at 11:39:49 UTC-0400 (Tue, 21 Jun 2022 15:39:49 +0000)
Bruce Johnson via Mailman-Users <[email protected]>
is rumored to have said:
Last week I got a notification from our SSL cert provider that the
cert for our mailman server was expiring, so I renewed it, and
realized that when I rebuilt the server last year I didn’t actually
enable it in Apache.
So I did, and added a rewrite rule in the httpd.conf to force all
traffic to use https.
After that, whenever a moderator or admin tried to submit a response
for a held message, we would get a pop-up stating that “This form is
insecure” , if we proceeded, the form submitted but nothing would
happen…the message was not approved or discarded.
After I removed the rewrite rule, the action works now, but it drops
me onto the http:// site not https:// .
Is there some site setting in Mailman I am missing to tell it to
always use https:// ?
(MM version version 2.1.29 running on Rocky Linux 8.5)
--
Bruce Johnson
University of Arizona
College of Pharmacy
Information Technology Group
Institutions do not have opinions, merely customs
------------------------------------------------------
Mailman-Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives:
https://www.mail-archive.com/[email protected]/
https://mail.python.org/archives/list/[email protected]/
--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
------------------------------------------------------
Mailman-Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/[email protected]/
https://mail.python.org/archives/list/[email protected]/
