[Zope-dev] can we teach official Zope to start detecting "HTTPS" header?

Brandon Craig Rhodes brandon at rhodesmill.org
Tue Feb 19 13:49:35 EST 2008


I'm told that, here at Georgia Tech, we are running our Plone's Zope
2.10 behind "pound", and that we need some way to signal it about
which requests are coming in through "http" and which came through
"https", so that all of the links generated by Plone can start with
the right protocol.  So at the moment, users who type an "https" URL
so that they can edit documents and enjoy some privacy immediately get
kicked back to the "http" protocol the first time they click on a
link.

For an earlier version of our site, back on an earlier version of Zope
and Plone, we edited Zope so that it detected an "HTTPS" header, if
one was present, and allowed the value:

   HTTPS: on

to change the protocol variable from HTTP to HTTPS.  Then we told
pound to provide that header when an "https" request was made, and to
delete the header otherwise, and everything worked fine.

Would there be any chance of getting this change into Zope trunk
today, or is it too specific a need to be worth adding to the code
just for us folks using "pound" at Georgia Tech?

The patch, in the form in which we first wrote it back at the
beginning of 2007, is attached for the curious.  Thanks for any feedback!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: zope_https.patch
Type: text/x-diff
Size: 697 bytes
Desc: not available
Url : http://mail.zope.org/pipermail/zope-dev/attachments/20080219/faed831b/zope_https.bin
-------------- next part --------------

-- 
Brandon Craig Rhodes   brandon at rhodesmill.org   http://rhodesmill.org/brandon


More information about the Zope-Dev mailing list