proxy / ssl

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

proxy / ssl

Shrum, Donald C
Thanks for the help today Eric...

I'm not sure if this is worth adding to the docs but I thought I'd post it in case someone would like to.

I have an apache proxy setup for galaxy with ldap authentication.  I wanted the user sign on to be over https as users are using their HPC accounts to sign in.

I modified /etc/httpd/conf/httpd.conf to redirect requests from http to https:
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) <a href="https://%">https://%{SERVER_NAME}/$1 [R,L]

I then added the proxy configuration to /etc/httpd/conf.d/ssl.conf to the virtual host section:
<VirtualHost _default_:443>
RewriteEngine On
RewriteRule ^/static/style/(.*) /panfs/storage.local/opt/galaxy-dist/static/june_2007_style/blue/$1 [L]
RewriteRule ^/static/scripts/(.*) /panfs/storage.local/opt/galaxy-dist/static/scripts/packed/$1 [L]
RewriteRule ^/static/(.*) /panfs/storage.local/opt/galaxy-dist/static/$1 [L]
RewriteRule ^/favicon.ico /panfs/storage.local/opt/galaxy-dist/static/favicon.ico [L]
RewriteRule ^/robots.txt /panfs/storage.local/opt/galaxy-dist/static/robots.txt [L]
RewriteRule ^(.*) <a href="http://144.174.51.187:8080$1">http://144.174.51.187:8080$1 [P]

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  http://lists.bx.psu.edu/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/