OK I am learning about somethign new here so if I ask some stupid questions here please forgive me...

basically I want to set up the server to be able to use https for login to certain areas of some of my sites. For example I may have a page that tarcks some custom site stats that I use htaccess to restrict use to (for example) http://www.mydomain.com/sitestats/index.php. I would like to have folks have to log into that using https. So I have three questions.

1) How do I set things up so that I can use https?

2) Can I FORCE folks to use https and if they simply call the page using http can I redirect them to an error page?

3) Is this something that can be set for the erver as a whole (use of https) or do I need to do this domain by domain?

Thanks!
DB

You can require an ssl connection to a directory using .htaccess

In the directory you wan't to require SSL for, create a .htaccess file..

Inside the file add the directive

SSLRequireSSL

save and exit. Now apache will require an SSL connection to access that directory.

Cool... That answers the require part... Now as for how to actually set up to use ssl. How do I go about doing that or is it already built into the server?

DB

I am still lost on this. I can use the https://www.mydomain.com:2083 URL to login to my server, but I can't use https://www.mydomain.com/private/index.html to call that page. I need some help on how to set this up. Can someone tell me what all I need to do to enable this please?

Thanks,
DB

You need to set up an SSL cert on your servers main
ip. You can do this in WHM (Web Host Manager). RS do certs for $39 which I use with success.

When you have set up the cert you and every domain on your box can use https by using the following link:

https://yourserver.com/~anydomainonbox.com

Hope this helps.

I have a stupid question. Is there a way to make it so you don't have to use the ~ sign?

I don't think you can as a shared SSL, but if you use an SSL cert on an IP based site then of course.

I presuming you mean shared though?


You can get free SSL certs though from freessl.com (I think thats the URL?) so it's not really an issue as long as you have plenty of ip's, which is another problem entirely:)

Yea, this is a shared cert I was using. Just saw some posint a ~/domain and some that were using /domain. Not a big deal. Thanks.