[Mailman-Users] mailman and https

[Todd]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lukas Ruf wrote:
> I run several mailing list on various virtual hosts with mailman
> 2.1.2 on a Linux 2.4 server.  This works just great!  (Thanks to the
> developers!).
>
> However, I would like to secure all administrative web-pages by
> https.  Searching the web and <http://list.org/docs.html> has not
> really led me to an understanding on how to achieve this.

Set this in mm_cfg.py:

    DEFAULT_URL_PATTERN = 'https://%s/mailman/'

Then restart the qrunners and use the fix_url.py script to update
existing lists.  You also need to run bin/arch as well to recreate the
archives if there are attachments in the archives of any lists.

And see this excellent FAQ entry:

    4.29. Where can I change a list or the default URL used for the
    web interface?
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq04.029.htp

There's a section on using SSL which links to another FAQ entry which
has more details.  Combined, these two entries should answer your
question pretty well.

> PS: https for the VirtualHosts in my Apache works already fine.
>     I tried to achieve this by inserting 'redirect permanent /mailman
>     "https://.."' -- without the intended effect, however.

This doesn't work for the admin forms since the POST data doesn't get
redirected.

- -- 
Todd        OpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
======================================================================
When the people fear their government, there is tyranny; when the
government fears the people, there is liberty.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.

iD8DBQE/wkIyuv+09NZUB1oRApoGAKDLfuvvw6va/QRIM+jdUBwC4BQzNQCcCYDH
AUasajJJbdU19N6YatTdShg=
=xa9M
-----END PGP SIGNATURE-----