Page 1 of 1

[Solved] Forums running over https connections

Posted: Sun Nov 03, 2013 1:19 pm
by RGB
Message from Jan Iversen on dev mailing list:
Hi

I am happy to announce that https://forum.openoffice.org is now open.

All http://forum.openoffice.org request are permanently redirected to
https://forum.openoffice.org

The site has been briefly tested, and the http/https mix problem exist on
forum, just like on wiki.

Thanks to all that helped make this happen.

on behalf of the infrastructure team
jan I.
Normal forum users will no see any difference: every http link will be redirected to https, but this mean greater security on connection, which is important for mods and admins.

NOTE: since yesterday, the wiki is running on https too.

Re: Forums running over https connections

Posted: Sun Nov 03, 2013 9:37 pm
by Hagar Delest
Note that if you use the [rel] tag instead of the full url when pointing to an address inside the forum, it should be more "transparent" I guess.

Re: Forums running over https connections

Posted: Tue Nov 05, 2013 8:12 pm
by gerard24
The forum is becoming inaccessible, thus perfectly secure. :(

Re: Forums running over https connections

Posted: Tue Nov 05, 2013 10:21 pm
by Hagar Delest
:lol:
Works fine for me since yesterday evening after last tweaks from RGB.
Forum responsive and no captcha. But still to be fixed, users should not have the same IP.

Re: Forums running over https connections

Posted: Tue Nov 05, 2013 10:36 pm
by RoryOF
Very slow (glacial) most of today, but OK now.

I agree about the IP. Also logged-on statistics need to be brought back to previous form.

Re: Forums running over https connections

Posted: Tue Nov 05, 2013 11:21 pm
by Villeroy
RoryOF wrote:Very slow (glacial) most of today, but OK now.
+1
I agree about the IP. Also logged-on statistics need to be brought back to previous form.
+1

Re: Forums running over https connections

Posted: Wed Nov 06, 2013 12:57 am
by Daiwe01
Villeroy wrote:
RoryOF wrote:
I agree about the IP. Also logged-on statistics need to be brought back to previous form.
+1
As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.

phpBB may also be configured to validate X-Forwarded-For IP in addition to the TCP-level IP.

Re: Forums running over https connections

Posted: Wed Nov 06, 2013 1:42 am
by RGB
Daiwe01 wrote:As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.
Problem is that do not result evident how to read that info on an easy way.
Daiwe01 wrote:phpBB may also be configured to validate X-Forwarded-For IP in addition to the TCP-level IP.
It's already configured that way.

Re: Forums running over https connections

Posted: Wed Nov 06, 2013 3:14 am
by Daiwe01
RGB wrote:
Daiwe01 wrote:As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.
Problem is that do not result evident how to read that info on an easy way.
Try replacing $_SERVER['REMOTE_ADDR']
in session_begin in session.php
with $_SERVER['HTTP_X_FORWARDED_FOR']

You should test boundary conditions, etc and the usual disclaimers apply

Re: Forums running over https connections

Posted: Wed Nov 06, 2013 2:04 pm
by RGB
Daiwe01 wrote:Try replacing $_SERVER['REMOTE_ADDR']
in session_begin in session.php
with $_SERVER['HTTP_X_FORWARDED_FOR']
Thanks, that explain why I was not able to find it :)

I do not have access to the php configuration files, only to the board configuration. I think that only Imacat can change that.