Task #2402
Story #2329: Public release of web site
SSL not configured for web site login
100%
Description
The web site used to allow https connections over SSL. It is necessary to allow secure connections to the site. Users should not be able to log into the site over a clear http connection. Proposed fix:
1) Install the DataONE wildcard certificate on the web server
2) Configure SSL for the site
3) rewrite requests the login page on the http site to the equivalent page on the https site using Apache's mod_rewrite
History
#1 Updated by Matthew Jones about 12 years ago
- Assignee changed from Rebecca Koskela to Chris Allen
#2 Updated by Chris Allen about 12 years ago
- Status changed from New to In Progress
SSL is not recommended site wide.
In progress of implementing alternative security measures as this is a web server only with no private/confidential data.
#3 Updated by Chris Allen over 11 years ago
- % Done changed from 0 to 100
This task has been completed as DataONE is running with a self signed certificate and SSL has been configured for the site by Hays Barrett at UNM ADAC.
#4 Updated by Chris Allen over 11 years ago
- Status changed from In Progress to Closed
- translation missing: en.field_remaining_hours set to 0.0
