Omnis App Server HTTPS

Fri Dec 9 21:47:58 UTC 2022

Ah, we were all having such fun :)

Mike

On 9 Dec 2022, at 20:33, IT <it at plastipol.com<mailto:it at plastipol.com>> wrote:

Caution: This is a message which has originated from outside the organisation. Ensure the sender is trusted and the content is safe before opening links or attachments.

Hi all,

Forget any other pieces of the puzzle. No webserver, no SSH tunnels, no VPNs. All this is not in the scope of the question.

Omnis acts as a web server or restful server and can serve http content.

My question was, Omnis can serve https content ?

I’m seeing that it can’t.

Thank you all for your advices.

regards

xavier

El 9 dic 2022, a las 20:07, Ben Butler <760.f563 at gmail.com<mailto:760.f563 at gmail.com>> escribió:

Hi,

Just to add bonkers options:

Https to web server A
Web server A passes to local script 1 that hanfles the REST GET/POST
Script 1 establishes SSH tunnel to server B anywhere on Internet, tha pipes
curl http request into the encrypted SSH tunnel to server B
server B handles the http un encrypted request to local Omnis server and
issues response.
Server A receives the response from server B through the SSH tunnel and
replies to original client over its Https connection.

Ben

On Fri, 9 Dec 2022, 18:40 Miguel Garcia, <miguel.garcia at roig.com<mailto:miguel.garcia at roig.com>> wrote:

Hi Xavier,

Alternatively, you can install nginx in Omnis web server host and
redirect https calls from Apache web server to http calls for Omnis web
server through nginx.

We resolve all https calls to rest webservices through nginx. It works
fine. The nginx server and the Omnis Web server are on the some network
segment.

I hope this helps you.

Best regards.

El 9/12/22 a las 15:49, IT escribió:
Hi Phil,

The Omnis web server resides in one host in the company and Apache web
server is in another host in internet service provider.

The connection is performed via internet.

So, all data between omnis and Apache is not encrypted and is insecure.

I have Omnis to Postgresql encrypted, Apache to client encrypted but
Omnis to Apache no avail.

There are one important requirement in this deployment. *ALL*
connections must be encrypted. End to end encryption.

regards

xavier

El 9 dic 2022, a las 15:13, Phil (OmnisList)<phil at pgpotter.co.uk<mailto:phil at pgpotter.co.uk>>
escribió:

Xavier,

So, are the web services and rest api going through the Apache
webserver?

In which case, why do you need HTTPS from Apache to Omnis?

and if your not going through Apache to Omnis, why not?

Don't you want a full blown apache web server as the first line of
defence from the outside world? That can also handle HTTPS...

To my recollection, except on dev machines, we always go through a full
web server so we can get https and other security measures.

regards
Phil Potter
Based in Chester in the UK.

On 09/12/2022 10:33, IT wrote:
Hi,

I’m developing some web services in Omnis, compound of web server and
restful api server.

I need that all communications end to end are encrypted, but I’m
unable how to force that Omnis App Server accepts https connections.

I can set up web server Apache to use https easily but not Omnis App
Server.

HTTP Worker Client allow you to set up $setsecureoptions() but no
similar settings for server side of Omnis App Server
I’m looking in the Remote Task properties, that I thought it mus’t be,
but I can't find any where to set the certificate and key files to use.

Very estrange that Omnis can’t serve over https nowadays, sure I’m
missing something.

Any one know how to enable SSL in Omnis App Server? Any clue?

Thank you in advance.

Xavier

_____________________________________________________________
Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,-5YowIGam7pyAPmvBZOW3HzXcm-ayJIGWxbMoe7gTNh_ZtngZyqf5G4RjmG5e9UuXkdevz4CmPHqVkEG2y0TYfs30qKU9SC_DDU4J9uh6uWho23X&typo=1
Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
_____________________________________________________________
Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,S1tXY1fAlPZpFsXk_m-JxW0sLXn7apJLvxrOBIBCsM8OXjcBSYvh1cbJ0kxs9NCjaPDZ9uCZqWL04iC5TsWDlWlEZBpJ6sVvv2fODGDuDwLFhAKNbQo,&typo=1
Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
_____________________________________________________________
Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,VqbKfAgp1etoEzeljOMtRhRCYHbo-uDDiGgntso5K5MseNKOM_NvyNMb1Rlt6gK4WW28iOjWXdyknePpL5SgD7p_fmK6XUPTCNIUzTAYLoD3CyUkG3yx9hdeK2Ce&typo=1
Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
--
*Miguel Garcia Segui
DPTO Informatica
971 65 71 73 Ext. 2044*

_____________________________________________________________
Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,Rutb43UVe_NbtmzIvk2qkkH5e5gtrW7ESQOwBzeq4M5g98yKsbFKBwLB9Jf6ImXhNrbW4gaQlGUU5MKTvepCYfdcnz6SZbloVTeX556q20xk1BR2&typo=1
Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com

_____________________________________________________________
Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,ghUEuXD6GL0EbRuLezujKTPrLNUGBuaiaHSOzpf-jy4ryCt1dtG1iDU3ZFLblvwM59VrTsXmjmSTUgu2TCfCnbxkv93Vbq5Gm3OLTmaLkTP6x7C9&typo=1
Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com

_____________________________________________________________
Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,xuNmLlSO37cbi2yBlDp94SoBxgFbYvSJuImrw3l5lAmuHUbsEcbiCDTuv8ZEBfHCJAlf9OQCOJth3mITYYS9TtVSI4zzz8RopiFcTmtX3ATH-1TMmd0WweUF&typo=1
Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com