>>>>> "ED" == Eric Doutreleau <[EMAIL PROTECTED]> writes:

ED> Right now i would like to make user authenticate throug a SSL
ED> page.
ED> In order to do that i modify the configuration script to use

ED> PerlSetVar WhatEverLoginScript https://corbeau/perl/login.pl

Well, in order to be able to get the original location, this has to be
done via an internal redirect.  When you switch protocols (ie, from
http to https) you cannot do internal redirect.

But really, your login page doesn't need to be ssl secured as there is
no information in it.  What you want is the target of the from in that
page to be aimed at an SSL URL.  That's the transaction you want
secured, since that's where the id/password are sent.

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Vivek Khera, Ph.D.                Khera Communications, Inc.
Internet: [EMAIL PROTECTED]       Rockville, MD       +1-240-453-8497
AIM: vivekkhera Y!: vivek_khera   http://www.khera.org/~vivek/

Reply via email to