1
piclauma
Login with a SSL certificate
  • 2007/2/22 14:20

  • piclauma

  • Just popping in

  • Posts: 20

  • Since: 2005/1/16


Hello there,

I am using XOOPS from a long time and it works fine...
Now I would to authenticate my users with a SSL certificate (USB Cerficate or Card Cerficate).

Does somebody eared about a new Profile module with this feature, or if somebody can give my a way to found informations about SSL Certifcate, it will great...

Thanks

2
rlankford
Re: Login with a SSL certificate
  • 2007/2/22 17:44

  • rlankford

  • Not too shy to talk

  • Posts: 158

  • Since: 2004/8/27


My site is behind a firewall and I run the *entire* site as https. This way I don't have to worry about any specific login form or block that either the XOOPS system uses or any particular module might use.

I'm not really sure that my situation makes sense for a 'normal' site though.

3
piclauma
Re: Login with a SSL certificate
  • 2007/2/22 20:01

  • piclauma

  • Just popping in

  • Posts: 20

  • Since: 2005/1/16


But in that way, you can't have a private area for your users. Is it right?

4
rlankford
Re: Login with a SSL certificate
  • 2007/2/22 21:04

  • rlankford

  • Not too shy to talk

  • Posts: 158

  • Since: 2004/8/27


Well, what I mean is, every URL on my site starts with https:// instead of justhttp://. So, functionally speaking, the site works exactly the same as it would without encryption. You can log on. You can bounce around areas that are available only to you. Everything. It's just that every single page gets encrypted (which, I'm sure, slows site performance a little).

But I don't have to worry about any particular form or block that asks for a user name/password. Since the whole site is SSL, the logins get encrypted too.

5
piclauma
Re: Login with a SSL certificate
  • 2007/2/22 21:08

  • piclauma

  • Just popping in

  • Posts: 20

  • Since: 2005/1/16


OK, I understand.
But I don't have the choice, I have to authenticate users with a certificate...
Any idea?

6
rlankford
Re: Login with a SSL certificate
  • 2007/2/22 21:16

  • rlankford

  • Not too shy to talk

  • Posts: 158

  • Since: 2004/8/27


Well,

First you have to go to some place like versign.com and purchase a SSL certificate. Once you've done that, they'll send you the certificate and the instructions that you need to install that servicate onto your Web Server. In my case, this mean installing the certificate into a specific folder and configuring Apache to use that certificate.

Then, you can tell XOOPS to use SSL for login authentication in Admin -> System Administration - Preferences -> **SSL Stuff**.

The "SSL Stuff" is:
"Use SSL for Login"
"SSL Post Variable Name"
"URL Where SSL Login Page is Located"

Once you've filled all this stuff in, then your users should see a secure page whenever they try to log in to your site.

Please remember, however, that the vast majority of this activity is with your web server environment and outside the scope of XOOPS itself.

7
piclauma
Re: Login with a SSL certificate
  • 2007/2/22 22:46

  • piclauma

  • Just popping in

  • Posts: 20

  • Since: 2005/1/16


Thanks for the information.
But I don't find the SSL AUTH in XOOPS...
I only have XOOPS and LDAP choices...

I am using XOOPS 2.2.5, is it only available for XOOPS 2.0.x?

PS: I don't have any problem with the SSL part, the question is only with the authentification...

8
rlankford
Re: Login with a SSL certificate
  • 2007/2/23 11:58

  • rlankford

  • Not too shy to talk

  • Posts: 158

  • Since: 2004/8/27


Quote:

I am using XOOPS 2.2.5, is it only available for XOOPS 2.0.x?


Perhaps. I have no experience with the 2.2 branch at all. Sorry.

9
farshid
Re: Login with a SSL certificate
  • 2007/2/26 8:10

  • farshid

  • Just popping in

  • Posts: 34

  • Since: 2004/11/9


I think you are looking the wrong part, SSL setting is located in: preferences>system>General settings!

10
piclauma
Re: Login with a SSL certificate
  • 2007/2/26 8:41

  • piclauma

  • Just popping in

  • Posts: 20

  • Since: 2005/1/16


OK, thanks I found it now...
But this is to have an authentification (login/passwod) over SSL (https).

I'm looking for something else, I would that my users use a certificate card/USB key, no more login/password needed...

any idea?

Login

Who's Online

130 user(s) are online (71 user(s) are browsing Support Forums)


Members: 0


Guests: 130


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits