[Zope] Zope and SSL

Ng Pheng Siong ngps@post1.com
Sun, 27 May 2001 12:52:20 +0800


On Sat, May 26, 2001 at 07:14:46PM +0200, Joachim Werner wrote:
> There is an SSLified version of ZServer:
> http://www.post1.com/home/ngps/zope/zssl/
> 
> Only problem: This gives you SSL-only. If you want both https: and plain
> http: from the same server, you will either have to use Apache or two
> ZServers and ZEO.

Nope, single instance of Zope gives you both and then some:

    z2s.py -D -X -w 8080 -y 8443 -W 8081 -Y 8444

The above (using the latest snapshot) gives you a http server on 8080, a
https server on 8443, a WebDAV-source-port server (for broken WebDAV
clients) on 8081, and a WebDAV-source-port-over-https server on 8444. 

You also get xmlrpc-over-https with the https server on 8443.

There is also a product called SSLAbsoluteURL (or something like that)
which gives you yet more flexibility in configuring your Zope pages
for http or https. I haven't tested it myself.

(Once upon a time, M2Crypto also had an encrypting monitor for Zope. 
Haven't updated that coz I have no use for it.)


> P.S.: As far as I know, Python 2.1 socket code now has in-built https
> support. Shouldn't it be easy to use this from ZServer?

The SSL support in Python 2.1 doesn't do servers.

Cheers.
-- 
Ng Pheng Siong <ngps@post1.com> * http://www.post1.com/home/ngps

Quidquid latine dictum sit, altum viditur.