HTTPS?

[gbm]

Is there any plans of adding https to cc content server connection?

bernie

[chaley]

Originally Posted by gbm

Is there any plans of adding https to cc content server connection?

bernie

It supports it now, but only using a URL, for example https://foo.bar.com/. If the URL doesn't specify a port then 443 is used. I use SSL (https) on my personal content server.

The reason CC requires a URL is that SSL certificate verification (almost always) requires a host name, not an IP address. CC does not support self-signed certificates. Actually, it is better to say that the underlying http library (apache) doesn't support self-signed certs without a bunch of extra work that I am not interested in doing.

[gbm]

Originally Posted by chaley

It supports it now, but only using a URL, for example https://foo.bar.com/. If the URL doesn't specify a port then 443 is used. I use SSL (https) on my personal content server.

The reason CC requires a URL is that SSL certificate verification (almost always) requires a host name, not an IP address. CC does not support self-signed certificates. Actually, it is better to say that the underlying http library (apache) doesn't support self-signed certs without a bunch of extra work that I am not interested in doing.

So basically I would need to use the same setup I would use for a private email server. I.e. get a host name from a domain registrar or one from freedns.afraid.org or similar service.

Get a CA from letsencrypt.org instead of using one of my self signed ones.

I did not find any information in the FAQ.


bernie

[chaley]

Originally Posted by gbm

So basically I would need to use the same setup I would use for a private email server. I.e. get a host name from a domain registrar or one from freedns.afraid.org or similar service.

Get a CA from letsencrypt.org instead of using one of my self signed ones.

Yes. I do something like that. I have a VPS at linode that I use for all sort of things. I have several domain names. I bought a cheap cert for one of those domains, and use that domain for email (incoming and outgoing), https, etc. I use apache as a reverse proxy in front of calibre, with a url-prefix so apache can do its reverse proxy magic.

I suppose that now that calibre v3 supports https, users, and certs directly I don't need the reverse proxy, but I am too lazy to change things.

I did not find any information in the FAQ.


bernie

There isn't anything there. It is probably worth my time to add something like my first response as a FAQ.

And you are welcome.

[chaley]

FAQ added. http://cc_faq.multipie.co.uk/index.php?solution_id=1098