Https RT3

RT Users
1

Hi All

I have been running RT3 in Apache+1.3.27+mod_perl+MySQL-4.0.13+Solaris8

I am trying to switch to https. However before I do that I like to find
if there is any watch out that anyone recommends. It would be easier if (
Sorry if there is already one and I am not aware of it) there are some
steps towards that.

Any hint/suggestion/direction/constructive advice/ would be greatly
appreciated

Thanks
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
There’s no place like 127.0.0.1

2

I have been running RT3 in Apache+1.3.27+mod_perl+MySQL-4.0.13+Solaris8

I am trying to switch to https. However before I do that I like to find
if there is any watch out that anyone recommends. It would be easier if (
Sorry if there is already one and I am not aware of it) there are some
steps towards that.

Any hint/suggestion/direction/constructive advice/ would be greatly
appreciated

Make sure that you turn off web server authentication to the mail gateway
that resides under the share/html directory otherwise when you try to
email RT, you’ll get a permission denied with rt-mailgate. Mine looks
like:

    Alias /rt3/REST/1.0  /opt/rt3/share/html/REST/1.0
    <Location "/rt3/REST/1.0">
            Satisfy Any
            Options FollowSymLinks Indexes ExecCGI
            AllowOverride None
            Order deny,allow
            Allow from MY.MAIL.MACHINE.ONLY
    </Location>

Otherwise, I don’t remember having a problem.

-jeff

3

Ahhhh, so that’s how you handle the mailgateway and ssl thing. :slight_smile: I left a
non-ssl version running for the mail gateway. (yeah yeah, defeats the
purpose, but what the hell).

I would think that you would have to have all the prerequisite perl modules
like NET::SSLEay, Crypt, etc… I installed em all but have no idea if they
are being used…

Oh yeah, make sure that you aren’t pulling the style sheet or some image
from an http site. Otherwise you will get a rather annoying popup saying the
web page has secure and nonsecure items and the powers that be will be a bit
distraught… from what I have heard <cough>From: rt-users-bounces@lists.bestpractical.com
[mailto:rt-users-bounces@lists.bestpractical.com] On Behalf Of Jeff Minelli
Sent: Tuesday, January 13, 2004 9:19 PM
To: iqbala@qwestip.net
Cc: rt-users@lists.bestpractical.com
Subject: Re: [rt-users] Https RT3

I have been running RT3 in Apache+1.3.27+mod_perl+MySQL-4.0.13+Solaris8

I am trying to switch to https. However before I do that I like to find
if there is any watch out that anyone recommends. It would be easier if (
Sorry if there is already one and I am not aware of it) there are some
steps towards that.

Any hint/suggestion/direction/constructive advice/ would be greatly
appreciated

Make sure that you turn off web server authentication to the mail gateway
that resides under the share/html directory otherwise when you try to
email RT, you’ll get a permission denied with rt-mailgate. Mine looks
like:

    Alias /rt3/REST/1.0  /opt/rt3/share/html/REST/1.0
    <Location "/rt3/REST/1.0">
            Satisfy Any
            Options FollowSymLinks Indexes ExecCGI
            AllowOverride None
            Order deny,allow
            Allow from MY.MAIL.MACHINE.ONLY
    </Location>

Otherwise, I don’t remember having a problem.

-jeff
rt-users mailing list
rt-users@lists.bestpractical.com
http://lists.bestpractical.com/mailman/listinfo/rt-users

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm

4

Ahhhh, so that’s how you handle the mailgateway and ssl thing. :slight_smile: I left a
non-ssl version running for the mail gateway. (yeah yeah, defeats the
purpose, but what the hell).

Yeah, I did alot of list searches and infered alot of info to figure
that one out. Hopefully this thread spells it out pretty clearly now.

I would think that you would have to have all the prerequisite perl modules
like NET::SSLEay, Crypt, etc… I installed em all but have no idea if they
are being used…

Correct, LWP needs Net::SSLeay installed.

-jeff