On 02/05/2018 16:29, Sven Van Caekenberghe wrote:
Hi Cyril,
Thank you for the infos and the fast reply :)
You can run a ZnSecureServer with a specific certificate. See the class comment. But, this is a bit experimental, you need a very specific certificate and I have only seen it work on Linux.
Good to know!
If you front you Seaside app with Nginx, I assume you are doing HTTPS -> HTTP in Nginx. I would suggest you try doing WWS -> WS as well. This does mean that connections are kept open of course (implicit in WebSockets). I have not yet done this myself, but it should work theoretically.
This is what I do now and it works fine. I just wanted to know if there was an alternative to write it in the documentation of the project (since it will be open source).
The thing is, you will find 100x more info on (correct) TLS/SSL setup on Nginx, and app proxying is totally accepted today.
Ok, so I'll probably just give an example with nginx in the documentation :)
Please let us know how it goes ;-)
Sven
-- Cyril Ferlicot https://ferlicot.fr