开云体育

  1. Jmriusers
  2. Topics

Locked Apache server

 

The OP might find this page useful:



I don't know to what extent JMRI's web server is "secure", but it is possible
to properly secure Apache, so using Apache (as a "reverse proxy") + Let's
Encrypt to provide SSL (https), might be a way to provide access to JMRI from
the public Internet in a secure way. Assuming that is really what the OP
wants to do...

At Thu, 19 Sep 2024 23:43:32 +0200 [email protected] wrote:


Why do you want SSL? What's your use case for this?

Do you have the JMRI computer open to the Internet so that other people
can access the JMRI computer?

Daniel

On 2024-09-19 04:09, Canadian Locomotive Logistics wrote:
Well yes and no.

i have 150 plus devices online.

other devices and port forwarding are already in effect.

why cant a ssl certificate just be imported into JMRI like some of my
other devices?





--
Robert Heller -- Cell: 413-658-7953 GV: 978-633-5364
Deepwoods Software -- Custom Software Services
-- Linux Administration Services
heller@... -- Webhosting Services
 

开云体育

Why do you want SSL? What's your use case for this?

Do you have the JMRI computer open to the Internet so that other people can access the JMRI computer?

Daniel

On 2024-09-19 04:09, Canadian Locomotive Logistics wrote:

Well yes and no.?

i have 150 plus devices online.?

other devices and port forwarding are already in effect.?

why cant a ssl certificate just be imported into JMRI like some of my other devices?
 

开云体育


why cant a ssl certificate just be imported into JMRI like some of my other devices?

While the underlying software may support this, it’s a use case that hasn’t yet been important enough to someone in the JMRI community to make sure the configuration works, is documented, etc.

If you want to provide TLS based communications to a JMRI server, I suggest using Apache or nginx as a reverse proxy configuration so that the TLS is handled by the software that clearly supports it, and let JMRI do its thing without having to muck about with TLS/certificates/etc. ? Your reverse proxy config would use HTTP (instead of HTTPS) to talk to JMRI, and only the reverse proxy server is accessible to the world at large, keeping JMRI istside your private network space.

david d zuhn
 

Well yes and no.?

i have 150 plus devices online.?

other devices and port forwarding are already in effect.?

why cant a ssl certificate just be imported into JMRI like some of my other devices?
 

You can change it in Preferences.
--SteveT
 

Jmri ises 12090 and 12080 for default ??
 

If you can serve your site on port 80, Cloudflare's free level can provide an SSL proxy for your site. See screenshot.
?
 

Some how u have to place an ssl certificate.?
 

What do you want to do? How do you want to configure the web server?
 

JMRI uses Jetty, not Apache.
 

My understanding that JMRI uses Apache
?
Does anybody have any more information on it and where I can look at the settings for Apache?
?
?

1 - 11 of 11