[Mailman-Users] help Securing Mailman's web GUI by using Secure HTTP/SSL

[Richard Barrett]

On 26 Jun 2006, at 21:00, daniel trejo wrote:

> I added these lines to apache to force https login,I also modified the
> mm_config.py to change the dafault url and ran the withlist script,  
> but when
> i put the url on my browser appears a message saying that the  
> redirection
> has no end or something like that.

What version of Apache are you running?

What other steps have you taken to configure your Apache server to be  
an HTTPS server? For instance VitualHost directives and such or are  
you running separate HTTP and HTTPS server instances?

What exactly is the error response you say you are getting?

This sound more like an Apache configuration problem rather than a  
Mailman problem. have you checked out the documentation available here:

http://httpd.apache.org/docs/
http://www.modssl.org/docs/2.8/ssl_faq.html

>
> ScriptAlias /mailman/ "/usr/local/mailman/cgi-bin/"
> Alias /pipermail/ "/usr/local/mailman/archives/public/"
> <Directory "/usr/local/mailman/cgi-bin">
>  AllowOverride None
>  Options +ExecCGI -Includes
>  Order allow,deny
>  Allow from all
>  SSLCipherSuite HIGH:MEDIUM
> </Directory>
>
> <Directory "/usr/local/mailman/archives/public">
>  AllowOverride None
>  Order allow,deny
>  Allow from all
>  Options FollowSymLinks
>
> </Directory>
>
>
> Redirect /mailman/ https://name of my server/mailman/
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users% 
> 40python.org/
> Unsubscribe: http://mail.python.org/mailman/options/mailman-users/ 
> r.barrett%40openinfo.co.uk
>
> Security Policy: http://www.python.org/cgi-bin/faqw-mm.py? 
> req=show&amp;file=faq01.027.htp