Use HTTPS for logins question

Use HTTPS for logins question

by Anthony Cygne -
Number of replies: 5
Use HTTPS for logins (checkbox)
Turning this on will make Moodle use a secure https connection just for the login page (providing a secure login), and then afterwards revert back to the normal http URL for general speed. CAUTION: this setting REQUIRES https to be specifically enabled on the web server - if it is not then YOU COULD LOCK YOURSELF OUT OF YOUR SITE.

About the part that says "REQUIRES https to be specifically enabled on the web server" How do I determine if https is specifically enabled on my webserver??
Average of ratings: -
In reply to Anthony Cygne

Re: Use HTTPS for logins question

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
You would need to speak to whoever manages you server... (Hosting company, school IT department etc...)
In reply to Jon Witts

Re: Use HTTPS for logins question

by Anthony Cygne -
*sigh* That would be me. I'm setting up a test Moodle server before going production and purchasing equipment.
In reply to Anthony Cygne

Re: Use HTTPS for logins question

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
Can you access your website using https://<yourwebserver> as well as http://<yourwebserver> ?

To be honest; if you do not know if you have setup a security certificate on your webserver, the answer is probably that you do not have https enabled!

What web server are you using?
In reply to Jon Witts

Re: Use HTTPS for logins question

by Anthony Cygne -
I'm running apache2 on ubuntu8.04
In reply to Anthony Cygne

Re: Use HTTPS for logins question

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
If this is just a testing server then there would be little point in purchasing a security certificate for your server; however you may want to consider it for your production server.

You can create a self-signed certificate for your server if you want to test using https for log on.

There is a guide here: https://help.ubuntu.com/8.04/serverguide/C/httpd.html and here: http://ubuntuforums.org/showthread.php?t=1112664 that might help you along.

My recommendation would be not to worry too much about using https on a testing server and just test the functionality of Moodle. You can always look into buying a certificate for your production server once you are configuring the new server.