Best practice forum (Archived)

This forum discussion has been removed

 
This forum post has been removed
Thursday, 20 November 2014, 12:10 AM
The content of this forum post has been removed and can no longer be accessed.
Galin Vassilev
Re: Entire site over https://?
by Galin Vassilev - Thursday, 20 November 2014, 9:19 AM
 

Hello,

Almost all of our installations are deployed in the exact same manner you are describing. Aka, entire Totara site over https. So in terms of whether it is possible, I would say absolutely. In fairness, we are entirely on a LAMP stack so our experience may not quite translate to a IIS and MSSQL installation, without some tweaks.

We do use proxy servers to offload SSL decryption, in front of web servers than handle the actual Totara traffic. To accomplish that the only setting that needs to be changed in config.php in totara is this one:

$CFG->sslproxy = true;

Beyond that the wwwroot is specified like this:

$CFG->wwwroot   = 'https://example.com';

As far as caching is concerned, it has not been a problem for us, at least within the context of our infrastructure. We have had far more issues with situations where external content like embedded videos, theme related javascript, images, css, fonts etc are being requested over http, while the site is https. In those cases browsers in general will flat out block such content and it will not be rendered, until the links to that content is switched from http to https.

Let me know if you need some more specific help with this. Would be glad to share/advise on what you can do in your situation.

Thanks,

Galin