[Mailman-Users] https for admin pages only question
Jon Carnes
jonc at nc.rr.com
Mon Mar 10 15:36:15 CET 2003
You want to run the "admin" and "admindb" cgi's using https, but all the
other Mailman cgi's (like listinfo) using http...
I don't think you can do that with the current versions, at least not
without modifying the code. This does seem like it would be a simple
hack to the code though....
Yes. I just peaked at the code, and you could easily add a new variable
to ~mailman/Mailman/mm_cfg.py - something like Admin_URL and
Admindb_URL. Then hack Admin.py and Admindb.py so that they used those
URL values instead of the default.
Good Luck - Jon Carnes
On Mon, 2003-03-10 at 03:44, Michael Dunston wrote:
> Can the links and form-actions for admin pages be reset to https without
> affecting the regular list (subscribers) links? I have set apache to
> redirect all '/mailman/admin/' and '/mailman/admindb/' requests to the
> SSL site; but all of the built-in admin links and form actions on those
> pages still point to "http://." So while the apache redirects do work,
> this causes the "you are leaving a secure site" and "you are entering a
> secure site" message every time a link is clicked or form submitted.
>
> The DEFAULT_URL_PATTERN = 'http://%s/mailman/' parameter seems to control
> this behavior; is there a way to set something like 'https://%s/mailman/
> admin/' in addition so that just the admin pages are populated with https
> instead of http?
>
> I found something similar in the archives which mentions 'what' to do,
> but no description of 'how' to do it:
>
> >From: Vivek Khera
> >
> >If you redirect a POST using mod_redirect, you lose the data. The
> >workaround is to capture the POST data from the original request,
> >convert it to a GET and redirect to that. But then if you're sending
> >the first request in the clear, what exactly do you gain by
> >redirecting to SSL after all the info just went by cleartext?
> >
> >You need to fix it up so that the page is submitted *directly* to the
> >SSL secured URL.
>
>
> Thanks in advance for any suggestions.
>
>
> .. . . . . . . . . . .
> Michael Dunston
> Music and Technology
> http://www.music.vt.edu
> Virginia Tech School of the Arts
>
>
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
>
> This message was sent to: jonc at nc.rr.com
> Unsubscribe or change your options at
> http://mail.python.org/mailman/options/mailman-users/jonc%40nc.rr.com
More information about the Mailman-Users
mailing list