[Tutor] A little security

[John Hazen]

Hmm, given that you specify that you're writing a CGI, it's possible
that noone has offered help because this is not a python issue.

The thread you referenced was about implementing a HTTPS *server*, not
a CGI.  So, yes.  There is an easier solution.

You need to configure your *web server* (not your python CGI) to
support SSL.  Your CGI will not need to be modified.

But, we don't know what server software you are using, so can't help
there.  (And it's beyond the scope of this list.)

However, a quick googling yields these (possibly helpful) links:

http://www.tldp.org/HOWTO/SSL-Certificates-HOWTO/
http://en.tldp.org/HOWTO/SSL-RedHat-HOWTO.html
http://tud.at/programm/apache-ssl-win32-howto.php3

Good luck!

-John

On Sat, 11 Jan 2003, John Abbe wrote:

> I've asked this twice now and gotten no replies. Am i running afoul 
> of some rule, or just slipping through the cracks, or ... ?
> 
> Thanks! Life,
> John
> 
> At 12:59 PM +0630 on 2003-01-08, John Abbe typed:
> >Aksed before, but no answer, so:
> >
> >I'm working on a Python CGI using passwords, which for now i've 
> >implemented in a field that gets sent with the GET method. This is 
> >obviously insecure. I'm guessing that https might be the simplest 
> >way to add security, but am very open to any suggestions.
> >
> >If it is to be https, i'd love to hear about any simpler ways to use 
> >it than the stuff pointed at by this news thread:
> >
> >http://groups.google.com/groups?frame=left&th=3ad2d5de60bb5f05
> 
> -- 
>   All you  /\/\ John Abbe           "If you don't like the news,
>       need \  / CatHerder            go out and make some of your own."
>       is... \/  http://ourpla.net/john/                --Wes Nisker
> 
> _______________________________________________
> Tutor maillist  -  Tutor@python.org
> http://mail.python.org/mailman/listinfo/tutor
> 

-- 
John Hazen              john@hazen.net              eFax: 801.697.4349
----------------------------------------------------------------------
Positive: mistaken at the top of your voice.