Home › Blogs › gccportal's blog

https

Tue, 2008-05-06 22:02 — gccportal
0
No votes yet

we have purchased verisign ssl and wondering why the luminis portal can't use https://website on the URL line; it instead redirect to http://website...but once login the https appears on the email, admin side.....

Any idea or suggestion will be much appreciated.

Thanks,
gccportal

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Wed, 2008-05-07 07:32 — dmmcinto

Not in the office yet so I

Not in the office yet so I wil need to follow up with specifics.

There is a config setting to tell luminis to use SSL , or more accuretly to not mask it in frames.

Thu, 2008-05-08 15:51 — David McMillan

Try this

I think this is what we used:

configman -s ssl_lock_on_login true

--
David McMillan

Thu, 2008-05-08 19:41 — gccportal

Tried...

Hi David,

thank you for your reply. Sungardhe CSC provided similar command, only on login though like the one you gave me. Is there any way we can implement all throughout the portal? not only on the login?

We are about to implement our online payment and this causes a big concern for many users. Thank you again for your response. Any additional help will be much appreciated.

Rich
"technology is like a virus."

Fri, 2008-05-09 18:05 — mitchelr

Thoughts on SSL in Luminis

First, you only need SSL in the portal for data included in the portal. For us, our online payment solution was not an issue because it was a separate application.
That said, there is an issue if you use the Banner Channels with privacy. Different people will come to different conclusions on this, but we wanted to encrypt all FERPA sensitive information. That was what ultimately drove use to using SSL.
Second, SSL encryption, at least in Luminis IV, is controlled by the file pointed to by the configman setting web.secure.access.config. It is an XML file with a moderately complex structure that I have not taken the time to understand.
Third, if it is an option for you , Luminis IV.0.2 was shipped with an secure access config file that allows all communications to be done via SSL. Full instructions on using it are in the Luminis IV.0.2 Upgrade Guide.

Fri, 2008-05-09 05:53 — Jason

complete ssl

I believe that there is a blog post on this site somewhere that described tons of edits to make a LPIII system completely ssl.

However, the easiest way would be to either purchase a load balancer with SSL termination, or to download and setup some load balancing software with ssl termination.

Even if you do not wish to actually load balance multiple web servers, the software/hardware will "re-write" all luminis http requests into https.

Fri, 2008-05-09 19:51 — webmonkey

Full time SSL

http://www.lumdev.net/node/1023

Our full time SSL is working in 3.3.3 but it took some hacks and the message board in group studio does not work. There were lots of issues with the damn hard coded URLs.

One of the big considerations is the RSS and image handling. Anytim a channel brings in content, and there is an image that is not done through SSL, the user gets the damn mixed content message. A SSL proxy and URL re-writing is unnecessary for that.

Cheers

DAVE