Skip to content

Update securing-the-kolab-server.rst #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
flixi wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update securing-the-kolab-server.rst #7

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 33 additions & 0 deletions source/administrator-guide/securing-the-kolab-server.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -118,7 +118,40 @@ as described.
EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 \
EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"

Setting up SSL on Apache and securing roundcubemail and kolab-webadmin by flixi
======================================================================

Use this Tutorial to generate your SSL-Certificates
http://softwareinabottle.wordpress.com/2011/12/18/setting-up-apache-http-server-with-ssl-support-on-ubuntudebian/
Step 2, Step 3, Step 4. After you have completed Step 4, do not disable the port!

You now have a self-signed-certificate and it works!

Now you have to restart the Apache, if t should fail try this.

.. code::
vim /etc/apache2/ports.conf
and edit the line
NameVirtualHost *:80
to read
NameVirtualHost *:443

In order to send both roundcubemail and kolab webadmin to the https versions of your site, do the following, enable the rewrite mod in apache2.

a2enmod rewrite

Go to the respective public_html folders of both roundcube and the kolab-webadmin, typically yuo can find these under /usr/share/roundcubemail/ and /usr/share/kolab-webadmin/public_html/

In both directories you should create .htaccess-files, or edit them if they are already there.
Insert this into the files:
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Now you should be unable to access yourserver/roundcubemail and yourserver/kolab-webadmin without being redirected to the https-version of both webpages.

How to get ssl for postfix, cyrus imap and the ldap service will be updated later.
Best, flixi
.. rubric:: Footnotes

.. [#] http://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29
Expand Down