On Thu, Apr 19, 2012 at 11:48:08AM -0700, Anand Mehta wrote:
> Is there any documentation for standalone OAE SSL configuration (Jetty, Sever
> Protection Service, etc.)?

Hi Anand,

I'd have something else other than OAE handle the SSL traffic, e.g. stick apache
httpd in front and have it proxy to the OAE ports. You'll need two public ip
addresses for this and two SSL certificates or one wildcard SSL cert as you have
two distinct URLS to protect against XSS attacks. You'll then need to put your
app and content urls in to the server protection service configuration.

Best wishes,

Daniel

-- 
--| Daniel Parry: dan...@caret.cam.ac.uk. www.caret.cam.ac.uk/ |--
"Snakes. Why did it have to be snakes?"
 [Indiana Jones, "Raiders of the Lost Ark"]
_______________________________________________
oae-dev mailing list
oae-dev@collab.sakaiproject.org
http://collab.sakaiproject.org/mailman/listinfo/oae-dev

Reply via email to