Re: How to use HTTPS

[Jean-Sebastien Delfino <js...@apache.org>]

Jean-Sebastien Delfino wrote:
> Jean-Sebastien Delfino wrote:
>> An interesting article on SCA/Tuscany:
>> http://www.drdobbs.com/tools/223800269
>>
>> On a related note, I think it would be good to have a few Tuscany 
>> samples showing how to use HTTPS, as an alternative to OpenVPN if for 
>> example you can't use a VPN with your hosting platform.
>>
> 
> I'm going to experiment a bit over the weekend and try to make the 
> sca-cpp tests work with HTTPS using Apache HTTPD mod_ssl [1].
> 
> It shouldn't be too hard as the SSL setup is well documented [2].

I've played around with Apache and OpenSSL and put together a few 
example scripts showing how it can be done:

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-ca-conf
creates a test CA (certification authority) certificate.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-cert-conf
creates test certificates, signed by the above CA.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/modules/http/httpd-ssl-conf
configures Apache HTTPD to use SSL with the above CA and certificates.

http://svn.apache.org/repos/asf/tuscany/sca-cpp/trunk/test/store-python/ssl-start
runs the store-python test app using SSL with either client/server 
certificate-based authentication or password-based HTTP basic 
authentication.

I've also added support for SSL client certificates and HTTP basic 
authentication to the WSGI code, allowing WSGI apps to talk to other 
servers over HTTPS.

Hope this helps.

> It'd be nice if somebody else could try with sca-java as well.
> 
> [1] http://httpd.apache.org/docs/2.0/mod/mod_ssl.html
> [2] http://httpd.apache.org/docs/2.0/ssl/
-- 
Jean-Sebastien