[Mailman-Users] -EXT-Re: Setting up SSL Virtualhost for Mailman

[Parker, Michael D.]

Hmmm....I seem to remember that there are places in the configuration files where http:// that would need to be changed to https://.  
If I also recall, existing mail lists have the http:// reference in them which would have to be changed also.

***** ***** ***** ***** ***** *****
Email: michael.d.parker at ga.com      <<<<< NOTE:  Remember to include my middle initial >>>>>

Michael D. Parker, CISSP 
EMS Programs Cybersecurity, Architecture, Software & Controls Division
General Atomics
ElectroMagnetics Systems Group (GA-EMS)
+1-858-964-6675 work phone
+1-858-376-7474 mobile phone
16969 Mesamint Street
San Diego, CA      92127-2407

*****************************************************************************
CONFIDENTIALITY NOTICE: This communication is intended to be confidential to the person(s)
 to whom it is addressed. If you are not the intended recipient or the agent of the intended 
recipient or if you are unable to deliver this communication to the intended recipient, you 
must not read, use or disseminate this information. If you have received this communication 
in error, please advise the sender immediately by telephone and delete this message and any
 attachments without retaining a copy. 
*****************************************************************************


-----Original Message-----
From: Mailman-Users <mailman-users-bounces+michael.d.parker=ga.com at python.org> On Behalf Of Mark Sapiro
Sent: Tuesday, September 11, 2018 13:00
To: mailman-users at python.org
Subject: -EXT-Re: [Mailman-Users] Setting up SSL Virtualhost for Mailman

On 09/11/2018 11:47 AM, Sean Son wrote:
> 
> Thanks for the reply man. I want to require HTTPS for Mailman and all 
> of its lists. I already have an SSL cert . I am running Apache as the 
> webserver on RHEL 7.  I took a look at the FAQs on the Mailman site, 
> regarding setting up SSL. It mentions that a virtual host can be set 
> up for HTTP to redirect to HTTPS, and a virtualhost can be set up for 
> the HTTPS and mailman configured to only work on HTTPs.  It is the 
> latter part, setting up the VirtualHost for HTTPS and configuring 
> mailman to work only with HTTPs, which I am lost on.

There are multiple ways to do this. It depends on whether you have other virtual hosts and if so, if they should also be able to access mailman.

In the simplest case, just put the various things for the mailman config such as

ScriptAlias /mailman/ /path/to/mailman/cgi-bin
Alias   /pipermail/  /path/to/mailman/archives/public/

<Directory "/path/to/mailman/cgi-bin/">
    Options ExecCGI
    Require all granted
</Directory>

<Directory "/path/to/mailman/archives/public">
    Options +FollowSymLinks
    Require all granted
</Directory>

directly in the mailman https virtual host.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan
------------------------------------------------------
Mailman-Users mailing list Mailman-Users at python.org https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: https://mail.python.org/mailman/options/mailman-users/michael.d.parker%40ga.com