<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Yep.
<div><br>
</div>
<div>All done, and all good. I’ve made some self-signed crts and keys already just to get moving - but I’ll request some true trusted keys and authoritative stores shortly bound to the real FQDN.</div>
<div><br>
</div>
<div>Surprisingly easy and simple to do. </div>
<div><br>
</div>
<div>Thanks, all!</div>
<div><br>
</div>
<div>-jc</div>
<div><br>
</div>
<div><br>
<div>
<blockquote type="cite">
<div>On 29 Jul 2014, at 9:00 pm, Aleksandra Tarkowska <<a href="mailto:A.Tarkowska@dundee.ac.uk">A.Tarkowska@dundee.ac.uk</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">Hi Jake</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">For your production system-wide nginx instance you just need the following:</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i>$ bin/omero web config nginx —system</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">And then you can tweak it with</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i>server {</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i> listen 80 default;</i></div>
<div><font face="Calibri,sans-serif"><i> server name your_domain.com;</i></font></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i> rewrite ^
<a href="https://$server_name$request_uri?">https://$server_name$request_uri?</a> permanent;</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i>}</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i><br>
</i></div>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">
<div><i>server {</i></div>
<div><i><br>
</i></div>
<div><i> listen 443 default ssl;</i></div>
<div><i><br>
</i></div>
<div><i> ssl on;</i></div>
<div><i> ssl_certificate /PATHTOYOUR/bundle.crt;</i></div>
<div><i> ssl_certificate_key /PATHTOYOUR/cert_key.key;</i></div>
<div><i><br>
</i></div>
<div><i> server_name <span style="font-size: 12px;">your_domain.com</span>;</i></div>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i><br>
</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><i> location /omero/static {</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; "><i> alias …;</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; "><i> }</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; "><i><br>
</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; "><i> location /omero {</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px; "><i> …</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"> <span class="Apple-tab-span" style="white-space: pre; ">
</span><i>fastcgi_param HTTPS on;</i></div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;">
<div><br>
</div>
<div><br>
</div>
<div>I presume you can handle self-signed/trusted certificate import</div>
<div><br>
</div>
<div>
<div>Kind regards</div>
<div>Ola</div>
</div>
</div>
</div>
<div style="font-family: Calibri, sans-serif; font-size: 14px;"><br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family: Calibri; font-size: 11pt; text-align: left; border-width: 1pt medium medium; border-style: solid none none; padding: 3pt 0in 0in; border-top-color: rgb(181, 196, 223);">
<span style="font-weight:bold">From: </span>Jake Carroll <<a href="mailto:jake.carroll@uq.edu.au">jake.carroll@uq.edu.au</a>><br>
<span style="font-weight:bold">Date: </span>Tue, 29 Jul 2014 10:07:54 +0000<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:ome-users@lists.openmicroscopy.org.uk">ome-users@lists.openmicroscopy.org.uk</a>" <<a href="mailto:ome-users@lists.openmicroscopy.org.uk">ome-users@lists.openmicroscopy.org.uk</a>><br>
<span style="font-weight:bold">Subject: </span>[ome-users] Omero + nginx https?<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
Hi all,
<div><br>
</div>
<div>Another day, another question. </div>
<div><br>
</div>
<div>Does anyone have Omero deployed using nginx + an https layer? Kind of not feeling too happy about the use of OME over the default config of an http plain connect and would like to deploy over https, if possible.</div>
<div><br>
</div>
<div>I’ve found some interesting comments like this:</div>
<div><br>
</div>
<div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">
# Uncomment if nginx SSL module is enabled or you are using nginx 1.1.11 or later</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">
# -- See: #10273, <a href="http://nginx.org/en/CHANGES">http://nginx.org/en/CHANGES</a></div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">
# fastcgi_param HTTPS $https;</div>
<div style="margin: 0px; font-family: 'Andale Mono'; color: rgb(41, 249, 20); background-color: rgb(0, 0, 0);">
}</div>
</div>
<div><br>
</div>
<div>After running a <span style="color: rgb(41, 249, 20); font-family: 'Andale Mono'; background-color: rgb(0, 0, 0); ">omero web config nginx</span></div>
<div><span style="color: rgb(41, 249, 20); font-family: 'Andale Mono'; background-color: rgb(0, 0, 0); "><br>
</span></div>
<div>Any thoughts or direction would be appreciated.</div>
<div><br>
</div>
<div>I’m guessing this wouldn’t normally be so hard, except I realise django is in some way involved - so deploying over https might not be as simple as I had expected?</div>
<div><br>
</div>
<div>Be useful if the OME guys (or someone else out there) had put a “how to” up.</div>
<div><br>
</div>
<div>Thank you.</div>
<div><br>
</div>
<div>Regards,</div>
<div><br>
</div>
<div>-jc</div>
<div><span style="color: rgb(41, 249, 20); font-family: 'Andale Mono'; background-color: rgb(0, 0, 0); "><br>
</span></div>
</div>
</div>
_______________________________________________ ome-users mailing list <a href="mailto:ome-users@lists.openmicroscopy.org.uk">
ome-users@lists.openmicroscopy.org.uk</a> <a href="http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users">
http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users</a> </span><br>
<span style="font-size:10pt;">The University of Dundee is a registered Scottish Charity, No: SC015096</span>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</body>
</html>