[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] extra detail on the ssl redirection problem



At 04:45 PM 2/28/2002, you wrote:
From: "duncan gray" <duncanrobertgray@xxxxxxxxx>

> As soon as you type in www.mydomain.co.uk/admin it
> redirects to
> http://www.mydomain.co.uk:81/.cobalt/sysManage/index.html
>
> :81 being the port number which isnt the port used for
> ssl encryption so it is a case of changing the port
> that the admin pages are run on how do I do this?
> E.g. to the same port that SSL runs on.
> i guess I would then be able to type in
> https://www.mydomain.co.uk/.cobalt/sysManage/index.html
> (droping off the port, as the https which is
> understood by the browswer will make sure it tansmits
> on that port), The question I would then have is would
> all the links inthe pages redirect to mydomainco.uk:81
> .. If so where are these pages held so I can change
> them.

The strange thing is, it does get redirected to
https://www.mydomain.nl:81/.cobalt/bla

That is quite strange maybe? https, but to port 81. Why, then, is the admin
server listening on port 444? It's getting late so maybe it's just me not
thinking clear.

netstat shows the admin connections going to port 81

The files, by the way are in /usr/admserv (on a raq 4).

Jelmer


Don't know if it answers anything, but....
There are two servers running.... the normal on port 80 and the admin on whichever other port If you have a certificate for your site, you can't have both server accessing the same port at the same time.
Thus now someone with the real skinny will answer up.