I was wondering about the same issue, I'm pretty sure gitorious redirect https to http except for privacy related pages like login ,register, account details and messages. didn't really investigate more on that because at the end my setup is that the site is publicly viewable and anyone can clone over git protocol, I'm happy with that. to login or register one needs to pass http authentication over ssl. I think the gitorious guys meant for openness and open source setup which is fine with me.
On Aug 20, 11:38 pm, Benjamin Podszun <benjamin.pods...@gmail.com> wrote: > Hi. > > Asked on irc, but that's mostly idle.. > > I'm setting up a new server. After ~ 9 month (deployed a rogue gitorious > server on 01.01.2010 in this company) we're finally migrating to an official > host, using git as our main vcs in the future. First things first: You guys > rock for providing gitorious in the first place. > > The problem: My requirement is this: http is only available from the > inside/domain network (to avoid sniffing code, blaa). https _is_ available > everywhere, BUT since gitorious makes everything public (and we don't want > that for (all) our code) we want to require authentication here. > > I can set up apache just fine, I though. I have two vhosts, both serving the > same files. One, the http one, blocks everything that isn't from an internal > ip. The other one, the https one, required authentication for everything not > having an internal ip. > > If I go tohttps://myserver/ > - I get a password request (GOOD, I'm trying this from outside of the domain > network) > - Wrong password -> No access (in other words: The configuration works..) > - Right password: I get a 302 redirect tohttp://myserver/ > > Wait. What? Why? I've no idea how that happens. Please, for the sake of my > mental health, tell me that gitorious thinks that it is a clever idea to > redirect based on - something? > > Thanks in advance, > Ben > - clever ideas > - bad configuration my part > - the current moon phase > > I'm really out of ideas now. I _highly_ doubt that the apache configuration > is to blame. -- To post to this group, send email to gitorious@googlegroups.com To unsubscribe from this group, send email to gitorious+unsubscr...@googlegroups.com
