Just to clarify - you cannot serve Galaxy only to localhost over http
and configure Apache to do the SSL and load balancing? I am having a
hard time conceiving of a scenario where I would encourage someone to
have paste deal with the SSL instead of Apache - configuring that in
paste is not going to be as robust, well documented, or secure IMO.
If you really do need to serve paste via SSL - I am not sure what to
do next. I have no experience in configuring Apache to do this and I
have not heard of anyone else doing it (one can imagine it is a lot
harder to act as a proxy for a process when the traffic to and from
that process is encrypted).
-John
On Wed, May 20, 2015 at 10:15 AM, Scott Szakonyi
<Scott.B.Szakonyi.1(a)nd.edu> wrote:
Hello all,
In our situation we're required to serve Galaxy via SSL. I encountered
problems trying to do this with Paste processes. It appears that when Apache
load balancing sends an incoming request to one of the load balanced
processes, it's no longer under SSL.
Running uWSGI is not a preferred option, as our computing infrastructure is
not set up to support RedHat 7.
Thus, I either need to understand how to configure SSL to work with the load
balanced Paste processes, or run with another setup.
So, if anyone in the community has experience with getting SSL to work with
the Paste processes, or with setting up some other sort of SSL friendly
configuration, I'd appreciate it if you would share your experience.
--
Scott B. Szakonyi
Research Programmer
Center for Research Computing
107 Information Technology Center
Notre Dame, IN 46556
http://crc.nd.edu
___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client. To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
https://lists.galaxyproject.org/
To search Galaxy mailing lists use the unified search at:
http://galaxyproject.org/search/mailinglists/