[Mailman-Users] Mailman 2.1.12 confirm.py works fine with http but does not work with https

[jimw...@attglobal.net]

Hi,

I have mailman 2.1.12 installed on Centos 6.5 using Apache 2.2.15 and 
python 2.6.6.


The mailman web page "Confirm Subscription Request" generated by 
confirm.py works fine with http, but does not work with https.


Please let me know if there is a modification that I can make for 
confirm.py to work with https.


To make my website more secure, my website is configured to only work 
with https and not with http.


Please let me know how I can use confirm.py with https.

confirm.py works fine with http, but not with https.

Your help with this problem is appreciated.

Thanks,

Jim West


--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Mailman 2.1.12 confirm.py works fine with http but does not work with https

[Mark Sapiro]

On 11/5/19 8:02 AM, jimw...@attglobal.net wrote:
> 
> To make my website more secure, my website is configured to only work
> with https and not with http.
> 
> Please let me know how I can use confirm.py with https.
> 
> confirm.py works fine with http, but not with https.


As I said in a prior reply, do at least steps 1-3 at
. Presumably, you have already done
step 1 or an equivalent to force https. Now you must do steps 2 and 3 to
ensure that the ACTION URL for forms is https.

You may also want to do step 4, although that doesn't bear directly on
this issue.


-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] confirm.py not working with https

[jimw...@attglobal.net]

Hi,

I have mailman 2.1.12 installed on Centos 6.5 using Apache 2.2.15 and 
python 2.6.6.


The mailman web page "Confirm Subscription Request" generated by 
confirm.py works fine with http, but does not work with https.


In /etc/httpd/httpd.conf, I am redirecting all http traffic to https 
using the redirect command in httpd.conf.


This may be causing a problem in confirm.py when retrieving the 
confirmation cookie from the URL using cgidata.getvalue.


Entering the confirmation cookie manually in confirm.py also does not work.

Please let me know if there is a modification that I can make for 
confirm.py to work with https.


To make my website more secure, my website is configured to only work 
with https and not with http.


Please let me know how I can use confirm.py with https.

confirm.py works fine with http, but not with https.

Your help with this problem is appreciated.

Thanks,

Jim West


--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org