I've managed to secure the control panel by following the https architecture thread
and i have configured apache to listen to port 8009 for jsp requests. my virtual hosts have the following line
### Proxy configuration:
# To be able to connect to the SSL service
SSLProxyEngine On
# EXTREMELY IMPORTANT!!!
ProxyRequests Off
# Secures the same host is displayed in the address bar of the browser.
ProxyPassReverse / [http://myhost:8080/]
# Enable mod_rewrite
RewriteEngine On
RewriteLog "/var/log/httpd/rewrite.log"
# Increase up to 4 to debug.
RewriteLogLevel 1
# Secures your server will not loop for ever
RewriteOptions MaxRedirects=10
# Will pass the full URL to the other hosts and virtual hosts: IMPORTANT!
ProxyPreserveHost On
#Secure Control Panel if not already on 443
RewriteCond %{SERVER_PORT} =80
RewriteRule ^(/group/control_panel.*)$ https://myhost:443$1 [R,L]
This seems to work fine you can get into all the options. However clicking on any tabs. for example in users click add user all you get is a blank page.
I have checked via port 8080 and it works fine but the urls are different
The link for add is
group/control_panel/manage?p_p_id=125&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&doAsGroupId=10136&refererPlid=10277&_125_struts_action=%2Fenterprise_admin_users%2Fedit_user&_125_redirect=%2Fgroup%2Fcontrol_panel%2Fmanage%3Fp_p_id%3D125%26p_p_lifecycle%3D0%26p_p_state%3Dmaximized%26p_p_mode%3Dview%26doAsGroupId%3D10136%26refererPlid%3D10277
port 8080 passes the querystring.
group/control_panel/manage?p_p_id=125&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&doAsGroupId=10136&refererPlid=10277&_125_struts_action=%2Fenterprise_admin_users%2Fedit_user&_125_redirect=%2Fgroup%2Fcontrol_panel%2Fmanage%3Fp_p_id%3D125%26p_p_lifecycle%3D0%26p_p_state%3Dmaximized
%26p_p_mode%3Dview%26doAsGroupId%3D10136%26refererPlid%3D10277
https:443 passes
group/control_panel/manage?p_p_id=125&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&doAsGroupId=10136&refererPlid=10277&_125_struts_action=%252Fenterprise_admin_users%252Fedit_user&_125_redirect=%252Fgroup%252Fcontrol_panel%252Fmanage%253Fp_p_id%253D125%2526p_p_
lifecycle%253D0%2526p_p_state%253Dmaximized%2526p_p_mode%253Dview%2526doAsGroupId
%253D10136%2526refererPlid%253D10277
I've tried the port 8080 url with https 443 instead and it worked fine. but clicking any links or tabs passes a wrong querystring and no data below the word portal I just have hit a stumbling blick with these extra numbers
