I gave this mod_wsgi-express a try, but it is spitting out an error about the 
—home option not being a valid option.  What should I be using instead?

thanks,
Jennifer

> On Dec 16, 2014, at 9:32 PM, Graham Dumpleton <[email protected]> 
> wrote:
> 
> One question. Is:
> 
>    SSLCertificateFile    /etc/ssl/certs/***
>    SSLCertificateKeyFile /etc/ssl/private/**
>    SSLCertificateChainFile /etc/ssl/certs/**
>    SSLCipherSuite HIGH:!aNULL:!MD5
> 
> what you actually have in the Apache configuration, including the '**', or 
> did you do that to mask information.
> 
> SSL configurations I have seen don't tend to have SSLCertificateChainFile 
> either. Not sure if that is a requirement for you or not.
> 
> Generally I just use:
> 
>    SLCertificateFile server.crt
>    SSLCertificateKeyFile server.key
> 
> I am always using self signed certificate files though.
> 
> Anyway, if you are happy with trying radical solutions, or at least 
> validating Apache/mod_wsgi with SSL works with a configuration done by 
> someone else, I have this dead horse called 'pip' I have been trying to sell 
> with not much luck.
> 
> Seriously, for a perhaps quick way of testing an alternate SSL configuration 
> with Apache, try this:
> 
> pip install mod_wsgi
> 
> sudo mod_wsgi-express start-server --user mod_wsgi --group mod_wsgi --port 80 
> --ssl-port 443 \
>    --ssl-certificate server --https-only --server-name redacted --home 
> /var/www/transfergateway \
>    --url-alias /media /var/www/transfergateway/myproject/myapp/media \
>    --url-alias /static /var/www/transfergateway/myproject/myapp/static \
>    /var/www/transfergateway/myproject/apache/wsgi.py
> 
> You would need to stop the existing Apache first. Change 'redacted' to the 
> actual ServerName value. The user and group to actual names for them. And 
> have the SSL server.cert and server.key files together in the same directory 
> and change 'server' argument to --ssl-certificate to be path to directory 
> they are in, with the common base name part of the files on the end. That is, 
> with extensions dropped off.
> 
> Okay, maybe too radical, but believe it or not that command line should 
> hopefully run up Apache/mod_wsgi against your Django site if I got all the 
> arguments right, with HTTPS all setup and in a HTTPS only configuration such 
> that access to HTTP will redirect automatically to HTTPS URLs.
> 
> Worth a try I guess if you really get stuck. :-)
> 
> Graham
> 
> On 17/12/2014, at 3:18 PM, Jennifer Mehl <[email protected]> wrote:
> 
>> Jason,
>> 
>> Having complete example configs would be fantastic. Turning on SSL in Apache 
>> is what is currently making parts of the app 'break' in IE and Safari.  It 
>> would be great if I could rule out the application code - changing front end 
>> web servers is probably the only way to do that.
>> 
>> Thanks in advance for the help!
>> 
>> Jennifer
>> 
>> 
>>> On Dec 16, 2014, at 8:14 PM, Jason Garber <[email protected]> wrote:
>>> 
>>> Hi Jennifer,
>>> 
>>> May I suggest you simplify your apache config by running apache on 
>>> 127.0.0.1:8086 (for example) and placing nginx in front of it proxying 
>>> requests to apache.  Use nginx for ssl termination.
>>> 
>>> It is dead simple and uncomplicates the apache config.
>>> 
>>> I can provide complete example configs if you wish.
>>> 
>>> Thanks!
>>> Jason
>>> 
>>> On Dec 16, 2014 8:03 PM, "Jennifer Mehl" <[email protected]> wrote:
>>> Thank you. Good to get those things all cleaned up.
>>> 
>>> I also compiled and installed v4.4.1 of mod_wsgi from source and removed 
>>> the 3.4 Ubuntu version from my system.
>>> 
>>> Setting DEBUG  False seems to break my application - I get a “Bad Request 
>>> 400” error back in my browser - so I will check in with the developer on 
>>> that one.
>>> 
>>> I’ve removed the extraneous environment variables and also the SSL proxy 
>>> setting. I am only using mod_wsgi with Apache, so, as you say, it shouldn’t 
>>> need that anyhow.
>>> 
>>> I’ve done the test for the /wsgicheck and it does return a value of https.  
>>> Thanks for helping me verify that functionality.
>>> 
>>> So, this leaves me with looking at Apache as a culprit - or again, the 
>>> Django code itself.  It’s very odd how only the two browsers are showing 
>>> issues and they are completely different issues…
>>> 
>>> thanks,
>>> Jennifer
>>> 
>>> 
>>> 
>>>> On Dec 16, 2014, at 4:41 PM, Graham Dumpleton <[email protected]> 
>>>> wrote:
>>>> 
>>>> Hmmm, this looks really dangerous:
>>>> 
>>>>  DEBUG  "FALSE"
>>>> 
>>>> The DEBUG setting is meant to be a boolean value, not a string.
>>>> 
>>>> Because you are setting it to a non empty string, it will be interpreted 
>>>> as True and so you have debug mode enabled.
>>>> 
>>>> That is not good as sensitive information could be exposed back to users 
>>>> in error pages shown in the browser.
>>>> 
>>>> Running in debug mode might cause other issues as well.
>>>> 
>>>> Ensure you are setting it to:
>>>> 
>>>>  DEBUG  False
>>>> 
>>>> Also, setting:
>>>> 
>>>>  os.environ['HTTPS']  "on"
>>>>  os.environ['wsgi.url_scheme']  'https'
>>>> 
>>>> will not do anything.
>>>> 
>>>> The wsgi.url_scheme is an attribute which is passed down by mod_wsgi in 
>>>> the details for each request. A web framework will use the flag from the 
>>>> request details. The main thing it controls is merely the construction of 
>>>> absolute URLs when needing to be added to response headers or maybe 
>>>> response content in some cases.
>>>> 
>>>> In other words, you do not need to set it and setting it in environment 
>>>> variables wouldn't do anything anyway.
>>>> 
>>>> Next, setting:
>>>> 
>>>>  os.environ.setdefault("DJANGO_SETTINGS_MODULE", "myproject.settings")
>>>> 
>>>> is okay if you have just the one Django site, but be careful in using this 
>>>> if you are running more than one. Safer to use:
>>>> 
>>>>  os.environ["DJANGO_SETTINGS_MODULE"] "myproject.settings"
>>>> 
>>>> More details in:
>>>> 
>>>>  http://blog.dscpl.com.au/2012/10/requests-running-in-wrong-django.html
>>>> 
>>>> You also don't need:
>>>> 
>>>>  SECURE_PROXY_SSL_HEADER ('HTTP_X_FORWARDED_PROTO', 'https')
>>>> 
>>>> if Apache is your front facing web server. You would only need this if you 
>>>> had a further front end proxy such as nginx in front of Apache and nginx 
>>>> had been configured to actually introduce these headers. That your Apache 
>>>> is accepting HTTPS requests would indicate that you don't have an nginx in 
>>>> front.
>>>> 
>>>> Now as to determine whether wsgi.url_scheme is set properly, the easiest 
>>>> way is to take a copy of:
>>>> 
>>>> def application(environ, start_response):
>>>>  status  '200 OK'
>>>>  output  str(environ.get('wsgi.url_scheme'))
>>>> 
>>>>  response_headers  [('Content-type', 'text/plain'),
>>>>                      ('Content-Length', str(len(output)))]
>>>>  start_response(status, response_headers)
>>>> 
>>>>  return [output]
>>>> 
>>>> Put it in a file called check.py nest to your existing wsgi.py file.
>>>> 
>>>> In the Apache configuration, BEFORE THE LINE:
>>>> 
>>>>  WSGIScriptAlias / /var/www/transfergateway/myproject/apache/wsgi.py
>>>> 
>>>> add:
>>>> 
>>>>  WSGIScriptAlias /wsgicheck 
>>>> /var/www/transfergateway/myproject/apache/check.py
>>>> 
>>>> Then down further where have:
>>>> 
>>>> <Directory /var/www/transfergateway/myproject/apache>
>>>> <Files wsgi.py>
>>>> Order deny,allow
>>>> Allow from all
>>>> </Files>
>>>> </Directory>
>>>> 
>>>> Change it to:
>>>> 
>>>> <Directory /var/www/transfergateway/myproject/apache>
>>>> <Files wsgi.py>
>>>> Order deny,allow
>>>> Allow from all
>>>> </Files>
>>>> <Files check.py>
>>>> Order deny,allow
>>>> Allow from all
>>>> </Files>
>>>> </Directory>
>>>> 
>>>> Restart Apache and then hit the URL of the site for /wsgicheck
>>>> 
>>>> You should see 'https' returned in the page.
>>>> 
>>>> Hope this helps.
>>>> 
>>>> Graham
>>>> 
>>>> On 17/12/2014, at 11:09 AM, Jennifer Mehl <[email protected]> wrote:
>>>> 
>>>>> No problem, if I have to compile from source, then I will try that.
>>>>> 
>>>>> One last thing regarding HTTPS - how do I ensure that I have the 
>>>>> wsgi.url_scheme set correctly?
>>>>> 
>>>>> Here is my wsgi.py file:
>>>>> 
>>>>> import os
>>>>> import sys
>>>>> 
>>>>> path='/var/www/transfergateway/myproject'
>>>>> 
>>>>> #if path not in sys.path:
>>>>> #sys.path.append(path)
>>>>> 
>>>>> os.environ.setdefault("DJANGO_SETTINGS_MODULE", "myproject.settings")
>>>>> 
>>>>> #HTTPS
>>>>> os.environ['HTTPS']  "on"
>>>>> 
>>>>> # This application object is used by any WSGI server configured to use 
>>>>> this
>>>>> # file. This includes Django's development server, if the WSGI_APPLICATION
>>>>> # setting points here.
>>>>> from django.core.wsgi import get_wsgi_application
>>>>> application  get_wsgi_application()
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>> and here is relevant stuff from my settings.py file:
>>>>> 
>>>>> import os
>>>>> PROJECT_ROOT  os.path.realpath(os.path.dirname(__file__))
>>>>> 
>>>>> 
>>>>> #turn off debug when going to production
>>>>> DEBUG  "FALSE"
>>>>> TEMPLATE_DEBUG  DEBUG
>>>>> 
>>>>> 
>>>>> # Python dotted path to the WSGI application used by Django's runserver.
>>>>> WSGI_APPLICATION  'myproject.wsgi.application'
>>>>> 
>>>>> 
>>>>> #session expire at browser close
>>>>> SESSION_EXPIRE_AT_BROWSER_CLOSE  True
>>>>> SESSION_COOKIE_HTTPONLY=True
>>>>> 
>>>>> #idle timeout
>>>>> SESSION_IDLE_TIMEOUT�0
>>>>> 
>>>>> #HTTPS stuff - secure proxy SSL header - do I need this?
>>>>> SECURE_PROXY_SSL_HEADER ('HTTP_X_FORWARDED_PROTO', 'https')
>>>>> #HTTPS stuff - secure cookies
>>>>> SESSION_COOKIE_SECURE  True
>>>>> CSRF_COOKIE_SECURE  True
>>>>> 
>>>>> #HTTPS WSGI
>>>>> os.environ['wsgi.url_scheme']  'https'
>>>>> 
>>>>> 
>>>>> 
>>>>>> On Dec 16, 2014, at 3:59 PM, Graham Dumpleton 
>>>>>> <[email protected]> wrote:
>>>>>> 
>>>>>> You will unfortunately not find a binary OS supplied Ubuntu 10.4 package 
>>>>>> for mod_wsgi which is newer.
>>>>>> 
>>>>>> Your only choice would be to compile from source code.
>>>>>> 
>>>>>> Graham
>>>>>> 
>>>>>> On 17/12/2014, at 10:54 AM, Jennifer Mehl <[email protected]> 
>>>>>> wrote:
>>>>>> 
>>>>>>> Thanks for this info. I’ll try a newer mod_wsgi.
>>>>>>> 
>>>>>>> It’s very odd to me that the app works fine in mod_wsgi/Apache with no 
>>>>>>> SSL but parts become broken in certain browsers once SSL is enabled.
>>>>>>> 
>>>>>>> At any rate, thanks for the guidance and I’ll report back if I find a 
>>>>>>> fix!
>>>>>>> 
>>>>>>> —Jennifer
>>>>>>> 
>>>>>>>> On Dec 16, 2014, at 3:46 PM, Graham Dumpleton 
>>>>>>>> <[email protected]> wrote:
>>>>>>>> 
>>>>>>>> If you are using mod_wsgi 3.4 that could be a problem in itself.
>>>>>>>> 
>>>>>>>> Recent versions of Ubuntu as I understand it use Apache 2.4, but such 
>>>>>>>> an old version of mod_wsgi may have issues on Apache 2.4. At the 
>>>>>>>> minimum would need to have mod_wsgi 3.5 from memory as some Apache 2.4 
>>>>>>>> fixes were back ported to 3.5. It is unlikely they back ported those 
>>>>>>>> themselves to 3.4 for 14.04.
>>>>>>>> 
>>>>>>>> Either way, mod_wsgi itself shouldn't be causing any problems with 
>>>>>>>> HTTPS as it is Apache that deals with all that and mod_wsgi has 
>>>>>>>> nothing to do with the handling of secure connections. When mod_wsgi 
>>>>>>>> sees a request that came via HTTPS it sees it as being no different to 
>>>>>>>> a HTTP request with the exception of what the wsgi.url_scheme 
>>>>>>>> attribute is set to. It is therefore more likely to be an Apache 
>>>>>>>> configuration issue or issue with the code of Apache itself.
>>>>>>>> 
>>>>>>>> FWIW, mod_wsgi 3.4 means that Ubuntu version is almost 20 versions 
>>>>>>>> behind. Even Ubuntu 14.10 has only mod_wsgi 3.5. It is quite 
>>>>>>>> frustrating that they haven't been bothered to update their packages 
>>>>>>>> to more recent versions even if only for the most recent 14.10.
>>>>>>>> 
>>>>>>>> About the only thing I can suggest if it is readily reproducible, is 
>>>>>>>> to use request logging such as described in:
>>>>>>>> 
>>>>>>>> http://code.google.com/p/modwsgi/wiki/DebuggingTechniques#Tracking_Request_and_Response
>>>>>>>> 
>>>>>>>> to see if when a request has issues, that the WSGI application 
>>>>>>>> actually returned the requests properly.
>>>>>>>> 
>>>>>>>> If it isn't, then use something like:
>>>>>>>> 
>>>>>>>> http://code.google.com/p/modwsgi/wiki/DebuggingTechniques#Extracting_Python_Stack_Traces
>>>>>>>> 
>>>>>>>> to get out Python stack traces for where a request handler may be 
>>>>>>>> stuck.
>>>>>>>> 
>>>>>>>> Both can be fiddly so sounds like you aren't going to have time to do 
>>>>>>>> that.
>>>>>>>> 
>>>>>>>> Graham
>>>>>>>> 
>>>>>>>> On 17/12/2014, at 10:04 AM, Jennifer Mehl <[email protected]> 
>>>>>>>> wrote:
>>>>>>>> 
>>>>>>>>> I’m on the latest for Ubuntu 14.04LTS - 2.4.7-1ubuntu4.1.  I have 
>>>>>>>>> been using the updated mod_wsgi3.4 from Ubuntu.
>>>>>>>>> 
>>>>>>>>> At this point I was thinking about trying my Django application in a 
>>>>>>>>> different WSGI server to see if I can narrow down if the problem is 
>>>>>>>>> with the Django code or something with mod_wsgi.  I was thinking 
>>>>>>>>> about uwsgi (trying to find something quick and easy to test) or 
>>>>>>>>> nginx.
>>>>>>>>> 
>>>>>>>>> Again, the weird browser behavior I describe below only happens when 
>>>>>>>>> using Apache/HTTPS, port 443, in mod_wsgi (not Apache/HTTP in 
>>>>>>>>> mod_wsgi or the Django development server in port 80).
>>>>>>>>> 
>>>>>>>>> I’m kind of at my wit’s end trying to narrow down *where* the problem 
>>>>>>>>> is (if it’s something in the Django code, I only have one more day 
>>>>>>>>> until my developer leaves for a few weeks for winter break…) Do you 
>>>>>>>>> think there any debugging I can do by looking at the developer 
>>>>>>>>> console in the affected browsers - for instance comparing the 
>>>>>>>>> affected pages on a working port 80 vs the same pages on the 
>>>>>>>>> non-working SSL/port 443 connection?
>>>>>>>>> 
>>>>>>>>> thank you,
>>>>>>>>> Jennifer
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>>> On Dec 16, 2014, at 2:55 PM, Graham Dumpleton 
>>>>>>>>>> <[email protected]> wrote:
>>>>>>>>>> 
>>>>>>>>>> One more question. What version of Apache are you using?
>>>>>>>>>> 
>>>>>>>>>> If you are stuck on a quite old Apache 2.2.X version that would be a 
>>>>>>>>>> concern as there were various SSL related issues patched during the 
>>>>>>>>>> life of Apache 2.2.X.
>>>>>>>>>> 
>>>>>>>>>> Graham
>>>>>>>>>> 
>>>>>>>>>> On 16/12/2014, at 11:40 AM, Graham Dumpleton 
>>>>>>>>>> <[email protected]> wrote:
>>>>>>>>>> 
>>>>>>>>>>> I'll go through the description you gave me and see if can suggest 
>>>>>>>>>>> anything, but first up, what version of mod_wsgi are you using?
>>>>>>>>>>> 
>>>>>>>>>>> If you are using mod_wsgi 4.4.0 make sure you update to 4.4.1. The 
>>>>>>>>>>> newer version resolves a potential for process crashing introduced 
>>>>>>>>>>> in 4.4.0.
>>>>>>>>>>> 
>>>>>>>>>>> Graham
>>>>>>>>>>> 
>>>>>>>>>>> On 16/12/2014, at 11:33 AM, Jennifer Mehl <[email protected]> 
>>>>>>>>>>> wrote:
>>>>>>>>>>> 
>>>>>>>>>>>> Hi there,
>>>>>>>>>>>> 
>>>>>>>>>>>> I am backpedalling a bit from my previous attempt to chroot 
>>>>>>>>>>>> mod_wsgi - instead, for now, just to get this Django application 
>>>>>>>>>>>> running, for simplicity, I am going to start out with just running 
>>>>>>>>>>>> it as a daemon as a restricted user.
>>>>>>>>>>>> 
>>>>>>>>>>>> In doing the final testing of my application on various browsers, 
>>>>>>>>>>>> I have noticed some strange problems.
>>>>>>>>>>>> 
>>>>>>>>>>>> When I run Django/mod_wsgi/Apache on port 80 (same config as 
>>>>>>>>>>>> below, minus the mod_ssl stuff)  or use the django development 
>>>>>>>>>>>> runserver 0.0.0.0:80, and disable the following settings in 
>>>>>>>>>>>> settings.py (#SESSION_COOKIE_SECURE  True #CSRF_COOKIE_SECURE  
>>>>>>>>>>>> True) these browsers work correctly in the app.
>>>>>>>>>>>> 
>>>>>>>>>>>> However, when running Django application running through mod_wsgi 
>>>>>>>>>>>> and HTTPS/port 443 in Apache, I see problems with both IE and 
>>>>>>>>>>>> Safari browsers.  After login on Internet Explorer, page timeouts 
>>>>>>>>>>>> occur in various locations, reporting "This page can't be 
>>>>>>>>>>>> displayed".  On Safari, the app won't get past the secondary Duo 
>>>>>>>>>>>> MFA authentication step, saying "Server unexpectedly dropped the 
>>>>>>>>>>>> connection." It is not a consistent behavior - seems to happen 
>>>>>>>>>>>> more frequently if I click quickly through links.   Sometimes if I 
>>>>>>>>>>>> wait long enough to click, it might work momentarily, but then not 
>>>>>>>>>>>> again a moment later.  This behavior does NOT happen using Chrome 
>>>>>>>>>>>> or Firefox browsers on any OS.
>>>>>>>>>>>> 
>>>>>>>>>>>> Apache config:
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> <IfModule mod_ssl.c>
>>>>>>>>>>>> 
>>>>>>>>>>>> <VirtualHost *:443>
>>>>>>>>>>>> 
>>>>>>>>>>>> ServerName **redacted**
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> #Django WSGI - Daemon
>>>>>>>>>>>> 
>>>>>>>>>>>> WSGIScriptAlias / /var/www/transfergateway/myproject/apache/wsgi.py
>>>>>>>>>>>> 
>>>>>>>>>>>> WSGIProcessGroup file-xfer
>>>>>>>>>>>> 
>>>>>>>>>>>> WSGIDaemonProcess file-xfer user=mod_wsgi group=mod_wsgi 
>>>>>>>>>>>> processes=2 threads% python-path=/var/www/transfergateway
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> <Directory /var/www/transfergateway/myproject/apache>
>>>>>>>>>>>> 
>>>>>>>>>>>> <Files wsgi.py>
>>>>>>>>>>>> 
>>>>>>>>>>>> Order deny,allow
>>>>>>>>>>>> 
>>>>>>>>>>>> Allow from all
>>>>>>>>>>>> 
>>>>>>>>>>>> </Files>
>>>>>>>>>>>> 
>>>>>>>>>>>> </Directory>
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> Alias /robots.txt 
>>>>>>>>>>>> /var/www/transfergateway/myproject/myapp/static/robots.txt
>>>>>>>>>>>> 
>>>>>>>>>>>> Alias /favicon.ico 
>>>>>>>>>>>> /var/www/transfergateway/myproject/myapp/static/favicon.ico
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> AliasMatch ^/([^/]*\.css) 
>>>>>>>>>>>> /var/www/transfergateway/myproject/myapp/static/styles/$1
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> Alias /media/ /var/www/transfergateway/myproject/myapp/media/
>>>>>>>>>>>> 
>>>>>>>>>>>> Alias /static/ /var/www/transfergateway/myproject/myapp/static/
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> <Directory /var/www/transfergateway/myproject/myapp/static>
>>>>>>>>>>>> 
>>>>>>>>>>>> Order deny,allow
>>>>>>>>>>>> 
>>>>>>>>>>>> Allow from all
>>>>>>>>>>>> 
>>>>>>>>>>>> </Directory>
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> <Directory /var/www/transfergateway/myproject/myapp/media>
>>>>>>>>>>>> 
>>>>>>>>>>>> Order deny,allow
>>>>>>>>>>>> 
>>>>>>>>>>>> Allow from all
>>>>>>>>>>>> 
>>>>>>>>>>>> </Directory>
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> ErrorLog ${APACHE_LOG_DIR}/error.log
>>>>>>>>>>>> 
>>>>>>>>>>>> CustomLog ${APACHE_LOG_DIR}/access.log combined
>>>>>>>>>>>> 
>>>>>>>>>>>> SSLEngine on
>>>>>>>>>>>> 
>>>>>>>>>>>> SSLCertificateFile    /etc/ssl/certs/***
>>>>>>>>>>>> 
>>>>>>>>>>>> SSLCertificateKeyFile /etc/ssl/private/**
>>>>>>>>>>>> 
>>>>>>>>>>>> SSLCertificateChainFile /etc/ssl/certs/**
>>>>>>>>>>>> 
>>>>>>>>>>>> SSLCipherSuite HIGH:!aNULL:!MD5
>>>>>>>>>>>> 
>>>>>>>>>>>> </VirtualHost>
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> </IfModule>
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> So, I'm concluding that the HTTPS problem is one of two things: 
>>>>>>>>>>>> how I am configuring mod_wsgi with HTTPS, or some issue inside the 
>>>>>>>>>>>> Django code (but HTTPS works on some browsers with no issues, so 
>>>>>>>>>>>> I'm stumped...)
>>>>>>>>>>>> 
>>>>>>>>>>>> Is there anything special that I need to do in mod_wsgi or the 
>>>>>>>>>>>> Django application itself, in order to make the application HTTPS 
>>>>>>>>>>>> only?  (I am not a Python or Django developer, so I would be 
>>>>>>>>>>>> passing info on to the actual application developer for 
>>>>>>>>>>>> resolution.)  Any ideas?
>>>>>>>>>>>> 
>>>>>>>>>>>> thank you,
>>>>>>>>>>>> Jennifer
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> --
>>>>>>>>>>>> You received this message because you are subscribed to the Google 
>>>>>>>>>>>> Groups "modwsgi" group.
>>>>>>>>>>>> To unsubscribe from this group and stop receiving emails from it, 
>>>>>>>>>>>> send an email to [email protected].
>>>>>>>>>>>> To post to this group, send email to [email protected].
>>>>>>>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> --
>>>>>>>>>> You received this message because you are subscribed to a topic in 
>>>>>>>>>> the Google Groups "modwsgi" group.
>>>>>>>>>> To unsubscribe from this topic, visit 
>>>>>>>>>> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
>>>>>>>>>> To unsubscribe from this group and all its topics, send an email to 
>>>>>>>>>> [email protected].
>>>>>>>>>> To post to this group, send email to [email protected].
>>>>>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>>>> 
>>>>>>>>> --
>>>>>>>>> You received this message because you are subscribed to the Google 
>>>>>>>>> Groups "modwsgi" group.
>>>>>>>>> To unsubscribe from this group and stop receiving emails from it, 
>>>>>>>>> send an email to [email protected].
>>>>>>>>> To post to this group, send email to [email protected].
>>>>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>>> 
>>>>>>>> --
>>>>>>>> You received this message because you are subscribed to a topic in the 
>>>>>>>> Google Groups "modwsgi" group.
>>>>>>>> To unsubscribe from this topic, visit 
>>>>>>>> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
>>>>>>>> To unsubscribe from this group and all its topics, send an email to 
>>>>>>>> [email protected].
>>>>>>>> To post to this group, send email to [email protected].
>>>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>>> 
>>>>>>> --
>>>>>>> You received this message because you are subscribed to the Google 
>>>>>>> Groups "modwsgi" group.
>>>>>>> To unsubscribe from this group and stop receiving emails from it, send 
>>>>>>> an email to [email protected].
>>>>>>> To post to this group, send email to [email protected].
>>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>>> 
>>>>>> --
>>>>>> You received this message because you are subscribed to a topic in the 
>>>>>> Google Groups "modwsgi" group.
>>>>>> To unsubscribe from this topic, visit 
>>>>>> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
>>>>>> To unsubscribe from this group and all its topics, send an email to 
>>>>>> [email protected].
>>>>>> To post to this group, send email to [email protected].
>>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>>> For more options, visit https://groups.google.com/d/optout.
>>>>> 
>>>>> --
>>>>> You received this message because you are subscribed to the Google Groups 
>>>>> "modwsgi" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>>>> email to [email protected].
>>>>> To post to this group, send email to [email protected].
>>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>>> For more options, visit https://groups.google.com/d/optout.
>>>> 
>>>> --
>>>> You received this message because you are subscribed to a topic in the 
>>>> Google Groups "modwsgi" group.
>>>> To unsubscribe from this topic, visit 
>>>> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
>>>> To unsubscribe from this group and all its topics, send an email to 
>>>> [email protected].
>>>> To post to this group, send email to [email protected].
>>>> Visit this group at http://groups.google.com/group/modwsgi.
>>>> For more options, visit https://groups.google.com/d/optout.
>>> 
>>> --
>>> You received this message because you are subscribed to the Google Groups 
>>> "modwsgi" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>> email to [email protected].
>>> To post to this group, send email to [email protected].
>>> Visit this group at http://groups.google.com/group/modwsgi.
>>> For more options, visit https://groups.google.com/d/optout.
>>> 
>>> --
>>> You received this message because you are subscribed to a topic in the 
>>> Google Groups "modwsgi" group.
>>> To unsubscribe from this topic, visit 
>>> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
>>> To unsubscribe from this group and all its topics, send an email to 
>>> [email protected].
>>> To post to this group, send email to [email protected].
>>> Visit this group at http://groups.google.com/group/modwsgi.
>>> For more options, visit https://groups.google.com/d/optout.
>> 
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "modwsgi" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected].
>> To post to this group, send email to [email protected].
>> Visit this group at http://groups.google.com/group/modwsgi.
>> For more options, visit https://groups.google.com/d/optout.
> 
> --
> You received this message because you are subscribed to a topic in the Google 
> Groups "modwsgi" group.
> To unsubscribe from this topic, visit 
> https://groups.google.com/d/topic/modwsgi/S1if2HhkGGE/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to 
> [email protected].
> To post to this group, send email to [email protected].
> Visit this group at http://groups.google.com/group/modwsgi.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"modwsgi" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/modwsgi.
For more options, visit https://groups.google.com/d/optout.

Reply via email to