Moodle entirely over https - how to?

[tom1985]

Hi,

What is the easiest and most efficient method of forcing to run moodle entirely over SSL https? I've had a search around but haven't really got any definitive answers. Our LEA internet provider is forcing us to have it all over https otherwise they will not allow external access.

Running Moodle on Ubunutu Server 8.04 with Apache2 etc...

Thanks in advance

[rh91uk]

Hi,

Try Apache SSL/TLS Encryption - Apache HTTP Server to get you started on configing SSL.

You'll need an SSL trusted sertificate. Can I suggest SSL Certificates SSL Wildcard SSL Free Certificates SSL Server Certificate 256 bits for a 2 yr free Educational trusted licence.

You'll also need, obviously, your lea to open port 443 for SSL too!

hope this helps.

[tom1985]

Hi thanks for your reply.

So far I have it working in as much as I can get to moodle via https://moodle/moodle locally, however all the links/images in moodle are still http, and images etc. How can I change those without hardcoding http--->https?

Thanks again

[tom1985]

Actually I have just solved it.

In the config.php in the moodle folder I changed

$CFG->wwwroot = 'http://moodle/moodle'; to $CFG->wwwroot = 'https://moodle/moodle';

Sorted!

Cheers

[rh91uk]

Glad you got it sorted - we're moving to moodle so I have bookmarked this page just in case I get any problems doing the same thing lol.

[danIT]

I'd always thought that I'd setup HTTPS purely for login purposes on Moodle, doesnt HTTPS cause things to slow down a little?

I could be wrong....

[tom1985]

Can't say I've noticed much difference to be honest. If you've got a decent server it should cope.

[webman]

Having all traffic subject to HTTPS means that the server has to do an awful lot of calculations for every single request - every page, every CSS file, and every image - for every visitor.

The effect this will have will depend on traffic levels and the server specification.

[danIT]

Am i also right in thinking it cant cache HTTPS?

[Geoff]

Indeed, HTTPS will not be cached.

[tonyd]

Hi all,

Has anyone else encountered problems with some SCORM content running over a HTTPS connection? Moodle has been running fine here over an fully SSL connection for a while, but we've just tried to install some SCORM course content from Peasons Digital, and it does not run. Pearsons support have simply stated that it is not compatile with HTTPS but without any explanation. We would like to get this working, but would also like to keep using HTTPS... Can anybody help me with this?

Thanks in advance,
Tony

[Geoff]

I would suspect that the SCORM content has embedded url referals that are http only. If you have something running on port 80 on the machine (hopefully the webserver, although netcat would be fine I suppose) check what its getting asked for. If this is the case you can fudge the issue with some url rewrite rules.

[soapyfish]

I have the same problem with Scorm packages being linked directly to HTTP. I have managed to work around this issue by trying to access the package using Googles chrome browser. When you open the link in Chrome it gives you the true URL to the Scorm package. I have then made a new shortcut/link which contains the corrected URL.
The corrected URL starting with HTTPS not HTTP. This has worked for some Scorm packages.

The issue I am having is that some of my packages supplied by AQA have a menu on the right hand side of the (like the old windows explorer view) and each linked document inside that directory tree has its own embedded URL which is HTTP but I cannot find away to create sensible links to this content as there are literally 1000's of different URL's....

If anyone has had any success working around this issue I would be very greatful to hear from you.

Scorm.png