<html>
<head>
</head>
<body class='hmmessage'><div dir='ltr'>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">
<div dir="ltr" abp="8034">
<style abp="8035"><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr" abp="8036"><font color="#000000" face="Courier New,sans-serif" abp="8037"><p abp="8038"><font color="#000000" face="Courier New,sans-serif" abp="8039">Hi Haiyang</font></p><p abp="8040"><font color="#000000" face="Courier New,sans-serif" abp="8041"></font> </p><p abp="8042"><font color="#000000" face="Courier New,sans-serif" abp="8043">I've just come across an article in a German IT security magazine and seemed to remember your question about enabling/disabling https on your CQPweb server and your comment about the costs of ssl certificates. This might be of interest to other CQPweb enthusiasts as well:</font></p><p abp="8044"> </p><p abp="8045">On Mon, Nov 3, 2014 at 1:06 AM, Haiyang wrote:</p><p abp="8049"> </p><p abp="8050">>If I understand it correctly, I need to install a security certificate to be able to use HTTPS on a server. But those certificate cost more than $70 per year, and I'm just install it on my personal website and simply don't have that budget right now.</p><p abp="8051"> </p><p abp="8052">You can always use https connections on your private server but browsers will warn users about an 'untrusted' certificate. In order to get rid of that warning you can either install your self-signed certificate in the browser(s) or add your domain as an exception to the list of trusted computers. </p><p abp="8053"> </p><p abp="8054">However your users will still get a warning which might discourage them from accessing your server. The only way to get rid of these warnings (as far as I know) is indeed to install a signed certificate issued by a trusted certificate authority. According to the following articles/posts, there seems to be a way to get such a security certificate for free (needs to be renewed once a year):</p><p abp="8055"> </p><p abp="8056">Recent English Tutorial: <a href="https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-with-a-free-signed-ssl-certificate-on-a-vps" abp="8057">https://www.digitalocean.com/community/tutorials/how-to-set-up-apache-with-a-free-signed-ssl-certificate-on-a-vps</a> [last updated: 25 Sep 2014]</p><p abp="8058"> </p><p abp="8059">Older article in German IT security magazine: <a href="http://www.heise.de/security/artikel/SSL-fuer-lau-880221.html" abp="8060">http://www.heise.de/security/artikel/SSL-fuer-lau-880221.html</a></p><p abp="8061"> </p><p abp="8062"> </p><p abp="8063">It worked perfectly for my small corpus server and it is completely free. The whole process of switching from self-signed to signed certificates took me about 30 minutes. The only prerequisite is that you own a top-level domain and have access to one of the following three email addresses of that domain (<a href="mailto:webmaster/postmaster/hostmaster@yourdomain.org">webmaster/postmaster/hostmaster@yourdomain.org</a>).</p><p abp="8064"> </p><p abp="8065"> </p><p abp="8066">Best wishes,</p><p abp="8067">Markus</p><p abp="8068"> </p><p abp="8069"> </p><p abp="8070"> </p><p abp="8071"> </p><p abp="8072"> </p><p abp="8073"> <br id="FontBreak" abp="8074"></p></font><p abp="8075"><br abp="8076"> </p><div abp="8077"><hr id="stopSpelling" abp="8078">From: a.hardie@lancaster.ac.uk<br abp="8079">To: cwb@sslmit.unibo.it<br abp="8080">Date: Mon, 27 Oct 2014 12:16:06 +0000<br abp="8081">Subject: Re: [CWB] How to disable HTTPS for CPQweb?<br abp="8082"><br abp="8083">
<style abp="8084"><!--
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal {
font-size:12.0pt;
font-family:"Times New Roman","serif";
}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink {
color:blue;
text-decoration:underline;
}
.ExternalClass span.ecxMsoHyperlinkFollowed {
color:purple;
text-decoration:underline;
}
.ExternalClass span.ecxEmailStyle17 {
font-family:"Verdana","sans-serif";
color:#1F497D;
}
.ExternalClass .ecxMsoChpDefault {
font-family:"Calibri","sans-serif";
}
.ExternalClass div.ecxWordSection1 {
}
--></style>
<div class="ecxWordSection1" abp="8085">
<p class="ecxMsoNormal" abp="8086"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8087">Using HTTPS / HTTP is something that is handled by your web server software, not by CQPweb itself.</span></p>
<p class="ecxMsoNormal" abp="8088"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8089"> </span></p>
<p class="ecxMsoNormal" abp="8090"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8091">If you’re using Apache, here is a place to start:</span></p>
<p class="ecxMsoNormal" abp="8092"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8093"> </span></p>
<p class="ecxMsoNormal" abp="8094"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8095"><a href="http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html" target="_blank" abp="8096">http://httpd.apache.org/docs/2.4/ssl/ssl_faq.html</a></span></p>
<p class="ecxMsoNormal" abp="8097"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8098"> </span></p>
<p class="ecxMsoNormal" abp="8099"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8100">If you’re using some other server, check it’s documentation!</span></p>
<p class="ecxMsoNormal" abp="8101"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8102"> </span></p>
<p class="ecxMsoNormal" abp="8103"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8104">best</span></p>
<p class="ecxMsoNormal" abp="8105"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8106"> </span></p>
<p class="ecxMsoNormal" abp="8107"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8108">Andrew.</span></p>
<p class="ecxMsoNormal" abp="8109"><span style='color: rgb(31, 73, 125); font-family: "Verdana","sans-serif"; font-size: 10pt;' abp="8110"> </span></p>
<p class="ecxMsoNormal" abp="8111"><b abp="8112"><span lang="EN-US" style='font-family: "Tahoma","sans-serif"; font-size: 10pt;' abp="8113">From:</span></b><span lang="EN-US" style='font-family: "Tahoma","sans-serif"; font-size: 10pt;' abp="8114"> cwb-bounces@sslmit.unibo.it [mailto:cwb-bounces@sslmit.unibo.it]
<b abp="8115">On Behalf Of </b>Haiyang Ai<br abp="8116">
<b abp="8117">Sent:</b> 26 October 2014 22:00<br abp="8118">
<b abp="8119">To:</b> cwb@sslmit.unibo.it<br abp="8120">
<b abp="8121">Subject:</b> [CWB] How to disable HTTPS for CPQweb?</span></p>
<p class="ecxMsoNormal" abp="8122"> </p>
<div abp="8123">
<p class="ecxMsoNormal" abp="8124">Dear All,</p>
<div abp="8125">
<p class="ecxMsoNormal" abp="8126"> </p>
</div>
<div abp="8127">
<p class="ecxMsoNormal" abp="8128">I'm wondering if anyone could give me some pointers on how I can disable HTTPS? </p>
</div>
<div abp="8129">
<p class="ecxMsoNormal" abp="8130"> </p>
</div>
<div abp="8131">
<p class="ecxMsoNormal" abp="8132">Thanks,</p>
</div>
<div abp="8133">
<p class="ecxMsoNormal" abp="8134">Haiyang<br clear="all" abp="8135">
</p>
<div abp="8136">
<p class="ecxMsoNormal" abp="8137"> </p>
</div>
<p class="ecxMsoNormal" abp="8138">-- </p>
<div abp="8139">
<p class="ecxMsoNormal" abp="8140">Haiyang Ai<br abp="8141">
Ph.D. Candidate in Applied Linguistics (ABD)<br abp="8142">
Department of Applied Linguistics<br abp="8143">
The Pennsylvania State University<br abp="8144">
304 Sparks Building<br abp="8145">
University Park, PA 16802</p>
</div>
</div>
</div>
</div>
<br abp="8146">_______________________________________________
CWB mailing list
CWB@sslmit.unibo.it
http://devel.sslmit.unibo.it/mailman/listinfo/cwb</div></div>
</div>
</div>
</div></body>
</html>