Skip to content

Commit

Permalink
SSL doc: fixed spacing
Browse files Browse the repository at this point in the history
  • Loading branch information
Andrew Ross committed Apr 4, 2012
1 parent 18995a6 commit 47fe791
Show file tree
Hide file tree
Showing 2 changed files with 29 additions and 27 deletions.
54 changes: 27 additions & 27 deletions docs/deploy/ssl.txt
Expand Up @@ -45,25 +45,25 @@ Next as root edit the Apache geonode config file :file:`/etc/apache/sites-availa


with:: with::


<IfModule mod_ssl.c> <IfModule mod_ssl.c>
<VirtualHost _default_:443> <VirtualHost _default_:443>


At the bottom of the file, replace:: At the bottom of the file, replace::


</VirtualHost> </VirtualHost>


with:: with::


SSLEngine on SSLEngine on
SSLCertificateFile /etc/ssl/certs/geonode.crt SSLCertificateFile /etc/ssl/certs/geonode.crt
SSLCertificateKeyFile /etc/ssl/private/geonode.key SSLCertificateKeyFile /etc/ssl/private/geonode.key
BrowserMatch "MSIE [2-6]" \ BrowserMatch "MSIE [2-6]" \
nokeepalive ssl-unclean-shutdown \ nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0 downgrade-1.0 force-response-1.0
# MSIE 7 and newer should be able to use keepalive # MSIE 7 and newer should be able to use keepalive
BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
</VirtualHost> </VirtualHost>
</IfModule> </IfModule>


This tells Apache where to fine the key and certificate. There are also some additional lines to handle MSIE, taken from Apache's default-ssl file. This tells Apache where to fine the key and certificate. There are also some additional lines to handle MSIE, taken from Apache's default-ssl file.


Expand All @@ -73,20 +73,20 @@ Tomcat Configuration
As root edit the Tomcat server config file :file:`/var/lib/tomcat6/conf/server.xml`, and replace:: As root edit the Tomcat server config file :file:`/var/lib/tomcat6/conf/server.xml`, and replace::


<Connector port="8080" protocol="HTTP/1.1" <Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000" connectionTimeout="20000"
URIEncoding="UTF-8" URIEncoding="UTF-8"
redirectPort="8443" redirectPort="8443"
/> />


with:: with::


<Connector port="8080" protocol="HTTP/1.1" <Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000" connectionTimeout="20000"
URIEncoding="UTF-8" URIEncoding="UTF-8"
scheme="https" scheme="https"
proxyName="<yourServersIPorDomainName>" proxyName="<yourServersIPorDomainName>"
proxyPort="443" proxyPort="443"
/> />


This tells Tomcat that it is running behind an https proxy. If this is omitted Tomcat will try to redirect to http. This tells Tomcat that it is running behind an https proxy. If this is omitted Tomcat will try to redirect to http.


Expand All @@ -95,18 +95,18 @@ GeoNode Configuration


As root edit the geonode config file :file:`/etc/geonode/local_settings.py` and change the ``SITEURL`` protocol to https:: As root edit the geonode config file :file:`/etc/geonode/local_settings.py` and change the ``SITEURL`` protocol to https::


SITEURL = 'https://<ipaddressOrDomainName>/' SITEURL = 'https://<ipaddressOrDomainName>/'




GeoServer Configuration GeoServer Configuration
======================= =======================


As root edit the file :file:`/var/lib/tomcat6/webapps/geoserver/WEB-INF/web.xml` and ensure the ``GEONODE_BASE_URL`` is specified as follows:: As root edit the file :file:`/var/lib/tomcat6/webapps/geoserver/WEB-INF/web.xml` and ensure the ``GEONODE_BASE_URL`` is specified as follows::


<context-param> <context-param>
<param-name>GEONODE_BASE_URL</param-name> <param-name>GEONODE_BASE_URL</param-name>
<param-value>https://localhost/</param-value> <param-value>https://localhost/</param-value>
</context-param> </context-param>


Also update ``proxyBaseUrl`` in the Geoserver global settings file :file:`/var/lib/geoserver/geonode-data/global.xml`:: Also update ``proxyBaseUrl`` in the Geoserver global settings file :file:`/var/lib/geoserver/geonode-data/global.xml`::


Expand Down
2 changes: 2 additions & 0 deletions docs/index.txt
Expand Up @@ -56,6 +56,7 @@ Administrators are expected to have some experience with Linux systems but they
* :doc:`Customizing the Look and Feel of GeoNode <deploy/customize>` * :doc:`Customizing the Look and Feel of GeoNode <deploy/customize>`
* :doc:`Debugging GeoNode Installations <deploy/debug>` * :doc:`Debugging GeoNode Installations <deploy/debug>`
* :doc:`Running GeoNode under SSL <deploy/ssl>` * :doc:`Running GeoNode under SSL <deploy/ssl>`
* :doc:`Changing the default language <deploy/language>`




.. toctree:: .. toctree::
Expand All @@ -67,6 +68,7 @@ Administrators are expected to have some experience with Linux systems but they
deploy/customize deploy/customize
deploy/debug deploy/debug
deploy/ssl deploy/ssl
deploy/language


For Developers For Developers
============== ==============
Expand Down

0 comments on commit 47fe791

Please sign in to comment.