SSL (HTTPS) Access

[arrmo]

Hi,

I would like to set up external access to NEWA - is there a way to secure this (i.e. SSL / HTTPS)?

Thanks!

[sub]

The built-in web server doesn't do SSL/TLS. The web server is not hardened, and only ever really intended for use in the relative safety of the local area network.

[craigrs84]

you might be able to install an apache server & configure ssl inside of apache, then receive requests through apache (SSL) and proxy to NPVR (Non-SSL).

we do something similar at work with our java servers.

EDIT: you'd want to be very careful if you attempt something like this - I guess your machine would still be compromised with this setup due to NPVR not being hardened. I'd put some sort of password requirement on the Apache side before proxying anything to NPVR but no guarantees of security.

[arrmo]

That makes sense! The machine already has IIS running on it - perhaps that would work?

Thanks!

[arrmo]

Hi,

FYI, I put SSL aside for now, tried to get IIS redirecting to NEWA (but only port 80 is available externally, and I use that for other servers also) ... so I tried to use URL Rewrite. It seems to work, but I get some error messages with NEWA (works with other web servers). Has anyone else tried this?

Thanks!