Best way to run site over http and https?

[jdk]

Hi,

I am experimenting with Mona 4.1. Currently, I have a number of Joomla sites set up using ViryualHosts on 3.5 to serve public pages over http, but the admin back end over https. It is very easy to set up an entire site to use ssl on Mona, but I am wondering what is the best way to serve part of a directory over ssl, while serving the remainder over http. Any suggestions?

Thanks,

Jeff

[BananaAcid]

might be helpfull, thought im no expert concerning ssl.

 

see usr\local\apache2\conf\ssl.conf

 

this looks to me like a template

<Directory "/ssl"> 
 AllowOverride All
 Order allow,deny 
 Allow from all
 SSLRequireSSL
</Directory>

SSLRequireSSL is the directive to activate the SSL part

 

in httpd.conf append that code with your directory defined

[jdk]

might be helpfull, thought im no expert concerning ssl.

 

see usr\local\apache2\conf\ssl.conf

 

this looks to me like a template

<Directory "/ssl"> 
 AllowOverride All
 Order allow,deny 
 Allow from all
 SSLRequireSSL
</Directory>

SSLRequireSSL is the directive to activate the SSL part

 

in httpd.conf append that code with your directory defined

Thanks. I understand that ssl.conf must be set up to point to the site for access via ssl, and that httpd.conf must point to the site via port 80.

 

I suppose that I am really asking about directories. Are /ssl and /www simply directories with no special attributes? Further, I am wondering in which directory I should set up the site for public access via http and admin access via https, or does it matter?

Thanks,

Jeff

[BananaAcid]

that ssl.conf gets included into the httpd.conf (apache conf), so its apache syntax and apache stuff. not a config for ssl directly, but tells apache how to handle ssl.

 

i would recommend something like this:

 

/apanel -> restricted to localhost:

/ -> open (= /www)

/webshop -> secure, ssl

 

the secrure folder needs a .htaccess with the following line:

SSLRequireSSL

 

as it looks like.

 

or you add the .htaccess file to the www root (/www) or into the apache conf and add the same stuff as the directory"/ssl"... as your directory.

 

the directory "command" takes an existing one and sets options for it.

 

in an htaccess file, not having the directory tags around the stuff, targets the current, where the htaccess file is located at.

 

that would be my best guess.