Omnis App Server HTTPS

Sat Dec 10 21:48:30 UTC 2022

I know MIke ;)

> El 9 dic 2022, a las 22:47, Mike Matthews - Omnis via omnisdev-en <omnisdev-en at lists.omnis-dev.com> escribió:
> 
> Ah, we were all having such fun :)
> 
> Mike
> 
> 
> 
> On 9 Dec 2022, at 20:33, IT <it at plastipol.com<mailto:it at plastipol.com>> wrote:
> 
> Caution: This is a message which has originated from outside the organisation. Ensure the sender is trusted and the content is safe before opening links or attachments.
> 
> 
> 
> Hi all,
> 
> Forget any other pieces of the puzzle. No webserver, no SSH tunnels, no VPNs. All this is not in the scope of the question.
> 
> Omnis acts as a web server or restful server and can serve http content.
> 
> My question was, Omnis can serve https content ?
> 
> I’m seeing that it can’t.
> 
> Thank you all for your advices.
> 
> regards
> 
> xavier
> 
> 
> 
> 
> El 9 dic 2022, a las 20:07, Ben Butler <760.f563 at gmail.com<mailto:760.f563 at gmail.com>> escribió:
> 
> Hi,
> 
> Just to add bonkers options:
> 
> Https to web server A
> Web server A passes to local script 1 that hanfles the REST GET/POST
> Script 1 establishes SSH tunnel to server B anywhere on Internet, tha pipes
> curl http request into the encrypted SSH tunnel to server B
> server B handles the http un encrypted request to local Omnis server and
> issues response.
> Server A receives the response from server B through the SSH tunnel and
> replies to original client over its Https connection.
> 
> Ben
> 
> 
> On Fri, 9 Dec 2022, 18:40 Miguel Garcia, <miguel.garcia at roig.com<mailto:miguel.garcia at roig.com>> wrote:
> 
> Hi Xavier,
> 
> Alternatively, you can install nginx in Omnis web server host and
> redirect https calls from Apache web server to http calls for Omnis web
> server through nginx.
> 
> We resolve all https calls to rest webservices through nginx. It works
> fine. The nginx server and the Omnis Web server are on the some network
> segment.
> 
> I hope this helps you.
> 
> Best regards.
> 
> El 9/12/22 a las 15:49, IT escribió:
> Hi Phil,
> 
> The Omnis web server resides in one host in the company and Apache web
> server is in another host in internet service provider.
> 
> The connection is performed via internet.
> 
> So, all data between omnis and Apache is not encrypted and is insecure.
> 
> I have Omnis to Postgresql encrypted, Apache to client encrypted but
> Omnis to Apache no avail.
> 
> There are one important requirement in this deployment. *ALL*
> connections must be encrypted. End to end encryption.
> 
> regards
> 
> xavier
> 
> 
> El 9 dic 2022, a las 15:13, Phil (OmnisList)<phil at pgpotter.co.uk<mailto:phil at pgpotter.co.uk>>
> escribió:
> 
> Xavier,
> 
> So, are the web services and rest api going through the Apache
> webserver?
> 
> In which case, why do you need HTTPS from Apache to Omnis?
> 
> and if your not going through Apache to Omnis, why not?
> 
> Don't you want a full blown apache web server as the first line of
> defence from the outside world? That can also handle HTTPS...
> 
> To my recollection, except on dev machines, we always go through a full
> web server so we can get https and other security measures.
> 
> regards
> Phil Potter
> Based in Chester in the UK.
> 
> On 09/12/2022 10:33, IT wrote:
> Hi,
> 
> I’m developing some web services in Omnis, compound of web server and
> restful api server.
> 
> I need that all communications end to end are encrypted, but I’m
> unable how to force that Omnis App Server accepts https connections.
> 
> I can set up web server Apache to use https easily but not Omnis App
> Server.
> 
> HTTP Worker Client allow you to set up $setsecureoptions() but no
> similar settings for server side of Omnis App Server
> I’m looking in the Remote Task properties, that I thought it mus’t be,
> but I can't find any where to set the certificate and key files to use.
> 
> Very estrange that Omnis can’t serve over https nowadays, sure I’m
> missing something.
> 
> Any one know how to enable SSL in Omnis App Server? Any clue?
> 
> Thank you in advance.
> 
> Xavier
> 
> 
> 
> 
> 
> 
> 
> _____________________________________________________________
> Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,-5YowIGam7pyAPmvBZOW3HzXcm-ayJIGWxbMoe7gTNh_ZtngZyqf5G4RjmG5e9UuXkdevz4CmPHqVkEG2y0TYfs30qKU9SC_DDU4J9uh6uWho23X&typo=1
> Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
> _____________________________________________________________
> Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,S1tXY1fAlPZpFsXk_m-JxW0sLXn7apJLvxrOBIBCsM8OXjcBSYvh1cbJ0kxs9NCjaPDZ9uCZqWL04iC5TsWDlWlEZBpJ6sVvv2fODGDuDwLFhAKNbQo,&typo=1
> Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
> _____________________________________________________________
> Manage your list subscriptions athttps://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,VqbKfAgp1etoEzeljOMtRhRCYHbo-uDDiGgntso5K5MseNKOM_NvyNMb1Rlt6gK4WW28iOjWXdyknePpL5SgD7p_fmK6XUPTCNIUzTAYLoD3CyUkG3yx9hdeK2Ce&typo=1
> Start a new message ->mailto:omnisdev-en at lists.omnis-dev.com
> --
> *Miguel Garcia Segui
> DPTO Informatica
> 971 65 71 73 Ext. 2044*
> 
> 
> _____________________________________________________________
> Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,Rutb43UVe_NbtmzIvk2qkkH5e5gtrW7ESQOwBzeq4M5g98yKsbFKBwLB9Jf6ImXhNrbW4gaQlGUU5MKTvepCYfdcnz6SZbloVTeX556q20xk1BR2&typo=1
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> 
> _____________________________________________________________
> Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,ghUEuXD6GL0EbRuLezujKTPrLNUGBuaiaHSOzpf-jy4ryCt1dtG1iDU3ZFLblvwM59VrTsXmjmSTUgu2TCfCnbxkv93Vbq5Gm3OLTmaLkTP6x7C9&typo=1
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> 
> _____________________________________________________________
> Manage your list subscriptions at https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.omnis-dev.com&c=E,1,xuNmLlSO37cbi2yBlDp94SoBxgFbYvSJuImrw3l5lAmuHUbsEcbiCDTuv8ZEBfHCJAlf9OQCOJth3mITYYS9TtVSI4zzz8RopiFcTmtX3ATH-1TMmd0WweUF&typo=1
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com
> 
> _____________________________________________________________
> Manage your list subscriptions at https://lists.omnis-dev.com
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com