UBB.Developers Forums General Discussion Chit Chat Secured server

Would there be any benefit of running UBB under port 443 - HTTPS? Can it be done? Has anyone done it?

Just looking to provide more security to my end users.

Has it been done? Sure. You don't have to do anything at all to the UBB to run it that way.

It's not the UBB itself that runs under port 443 as UBB doesn't actually run itself. As you know it is a set of script exectuted by apache. Apache can be bound to any unused port.

Likely you want to run UBB under SSL. Easy enough. I'm sure you have mod_ssl running, just provide a virtiual host entry in your ssl configs just as you did in your non ssl configs. Provide a doc root, script alias, ExecCGi permissons, and everything you would just as you would a non ssl site. Drop the scripts in and go.


Short answer:

UBB is just a perl script, it doesn't care if it is running under SSL or not.

Your server will though. It'll take a noticeable amount more horsepower if every page is served SSL. Remember, no more taking advantage of any buffering, caching, paging, or anytihng else your OS does. Every page now has to be encrypted and sent. more overhead.

I modified my board to work (allow browsing to stay in ssl and nonssl) under both the standard apache port and ssl; test:

SSL:
https://www.undergroundnews.com/cgi-bin/ubbcgi/ultimatebb.cgi

NonSSL:
http://www.undergroundnews.com/cgi-bin/ubbcgi/ultimatebb.cgi

I think it was LK that sat and modded files, but he got it working none the less.

I don't really see why anyone would want SSL access unless they where using ssl to bypass a firewall (some schools allow all ssl connections outward)