[GeoNode-devel] Using HTTPS Geoserver with Geonode.

[Francesco Bartoli]

Hi Jeff,

agreed, it makes sense. Maybe here in these two places?

https://github.com/GeoNode/geonode/blob/master/docs/tutorials/install_and_admin/geonode_install/setup_configure_httpd.txt

https://github.com/GeoNode/geonode/blob/master/docs/tutorials/install_and_admin/setup_on_centos/install_base_httpd.txt

Ciao
Francesco

Il giorno 07/dic/2015, alle ore 05:16, Jeffrey Johnson <ortelius at gmail.com> ha scritto:

> Might be good to add something about this topic to the docs somewhere.
> 
> On Sat, Dec 5, 2015 at 10:44 PM, Francesco Bartoli <xbartolone at gmail.com> wrote:
> Hi,
> 
> if your geonode instance is running within Apache then you have to instruct its httpd process to do not verify certificate of GeoServer in the proxy pass directive [1]. Otherwise if you have to verify it for security reasons then you should add its CA to the trusted store of CAs [2].
> 
> Hope this helps
> 
> Francesco
> 
> [1] https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslproxyverify
> 
> [2] https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslproxycacertificatepath 
> 
> Il giorno 04/dic/2015, alle ore 17:24, mdoakes42 at verizon.net ha scritto:
> 
>> Summary:  Using HTTPS Geoserver with Geonode.  
>> 
>> I just finished installing geonode on a local test box and the app comes up fine.   I have a remote GEOSERVER that is HTTPS enabled.   When I try to upload layers I get an error in the server regarding SSL_GET_SERVER_CERTIFICATE: certificate verify failed.
>> 
>> Can Geonode be configured so that I can communicate with an HTTPS enabled Geoserver.    (In Geoserver we have to present a certificate (PKI) in order to login).   On the geoserver side we basically have this installed 
>> 
>> http://docs.geoserver.org/latest/en/user/security/tutorials/cert/
>> 
>> _______________________________________________
>> geonode-devel mailing list
>> geonode-devel at lists.osgeo.org
>> http://lists.osgeo.org/mailman/listinfo/geonode-devel
> 
> 
> _______________________________________________
> geonode-devel mailing list
> geonode-devel at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/geonode-devel
> 
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-devel/attachments/20151207/ddd1c5e4/attachment.html>