World: r3wp

this web server is for local intranet .. but sometimes allow users 
to browse from outside via ssl.

can I use http://sourceforge.net/projects/sslexplorerto set up a 
ssl vpn so that the remote user logins via the vpn, and then accesses 
the intranet's web server?

which also means I could grant untrusted users temporary access to 
the web server.

I would help you Maxim, but I'm now working on my Rebol/Flash dialect 
(after very long time) so maybe afterwards.

Graham - if you generally know, how to allow ssl for Cheyenne, what 
is the problem with vpn? Wouldn't just router firewall opening/redirecting 
port of ssl (443 IIRC) be enough?

graham, you can put an apache server which only accepts the ssl connections 
with reverse proxy setup which redirects the uncrypted ssl traffic 
to/from the cheyenne server. it works well.

btw remark is now online... wondering if everyone sees the announce 
group... sometimes I think only a minority actually see/read it.

Oldes: thanks for the offer of help cgi mode with remark.  Anytime 
you want, just ping me and we can see what needs too be done to make 
it happen.

maxim: why do you think nobody's reading it? because your web's bandwith 
wasn't wasted in ten minutes and there are no ecstatic reactions? 
;)

hahaha, I don't expect to change the world... just that my announce 
didn't even generate one sign or having been read... so I wonder 
sometimes, if most of you use the custom dividers or are like me 
and just the "all groups" master didivers and clear them as they 
 are filled.

actually I've read it, but have no time right now to try it. I'm 
still looking for some web managment so I can rework my web, but 
the time...that's the problem :) I'm using just "all groups" and 
check red groups for anything interesting :)

eeks, I hope my product isn't in direct competition with maxims... 
:-)

hehe I read about it.. I think you could generate your app within 
mine.

but not the opposite.

that is probably true. however I may change the architecture a bit 
since the parser is limited to two levels and is not recursive. the 
pages are generated from a limited list. all I really wanted to do 
was to make it easy to combine blogger.r, makedoc documents, dir 
listings and customized html output in a pipeline. it does most of 
that now, but the parser is only about 80% elegant. :-)

but I love the speed. comparing it to rapidweaver, it's crazy fast. 
it's webserver independent as well.

I put 0% of time on site layout, once its done.  I just edit content 
and make the page.  its like editing make doc, but in html format... 
also, the tags are not standard html type tags  they nest directely 
 <p! text <b! is bold <i! and italic>>>

easier to edit, since I don't have to track the damned end tag all 
the time... this being said, normal html is still valid within the 
files... so its a 1/2 way between html and rebol code.

Max, can you elaborate on using Apache ssl with Cheyenne ?

I did so for my own server, which is an http web service:

you install and setup an apache server which has ssl, reverse proxy, 
and redirection modules enabled.

then you accept the connections from the ssl port (apache silently 
handles the decryption) and redirect all traffic to your cheyenne 
server.

are these automatically installed?

they are all part of the standard apache distro... but you have so 
edit the config file to enable them

I am not an apache expert, I had the setups done for me, but it works 
out  :-)

the setups where very basic though... 4-5 lines, basically setting 
up the ports, and urls ... not much wizardry.

Ok.  I've already downloaded this vmware ssl appliance ... but good 
to know now.

using the dynamic linking, means you don't have to understand the 
apache compilation part... so its pretty easy to setup.

Apache to run Cheyenne? Odd.

i'd rather say apache is just a slave in this setup

it just acts as a signal converter

Ok here's a riddle..  When is a slave a master?

When he reaches Zen

When he's a middle manager?

Graham: you should look at http://www.stunnel.org/to add SSL support 
to Cheyenne.

It's a command-line tool acting as a SSL daemon frontend for any 
server requiring SSL decryption.

I had a go .. but couldn't get it to work.

I just intalled the windows version, it works very well. I just had 
to edit the stunnel.conf file to uncomment the HTTPS config options.

Ok, I might have to have another attempt.

yes... must agree with Doc. It's very easy, just download the latest 
precompiled version (I have 4.20) install, uncomment the https as 
doc said and than do:
      stunnel.exe -install
to install it as service.. and:
      stunnel.exe -start
to start it.

What I would like to know, is if I can use it to get https urls from 
Rebol, not just to encrypt my server?

Didn't tried that, but there's a client mode in stunnel.

Is this what you did ?  http://www.stunnel.org/examples/https_windows.html

which is what I tried last year and could not get working.

That's the hard way ! :-)

Just download and install the precompiled version : http://www.stunnel.org/download/stunnel/win32/stunnel-4.20-installer.exe

Then Start => Programs => STunnel => Edit stunnel.conf : uncomment 
the [https] section, then save it.

Wow .. so easy?

Then STunnel => Run STunnel ...and that's all. Takes 2 mn, including 
the download time.

Ok. Definitely will try it .. why do they have a how to that's so 
difficult ??