Hub settings for an apache server using SSL

[dfl1955]

Is there a setting on the hub required if using apache and ssl?

Does anyone have an example of a site config file for such a server?

Dave

[licquorice]

---

@dfl1955 wrote:

Is there a setting on the hub required if using apache and ssl?

---

No

[dfl1955]

Do you have an example of a config file?

D

[licquorice]

No, sorry. You would be better asking on either an Apache forum or your operating system's forum. It's not a BT thing.

[jac_95]

The BT Smart Hub's firewall is just controlling what can go in and out based on a Layer 3 network.  So source IP addresses, destination IP addresses, port and protocol. It's not doing any TLS termination, mutual SSL auth, ect...

As @licquorice  has said you'll need to onto the Apache developer forum or the developer forum of the software or hardware you're trying configure and use.

Tip though, some opensource certificate authorities such as let's encrypt have packages you can use that help automate the configuration and rotate the certificate for you that work with Nginx or Apache.

[ptrduffy · Accepted solution]

If you just want the hub settings to forward traffic to an Apache server on your home network, it should be as simple as forwarding TCP ports 80 and 443 to your server's internal IP address.

The rules are configured in 'Advanced Settings -> Firewall -> Port Forwarding'

You should then be able to connect from outside your home network to that server using your public IP address.  Bear in mind that this can change following a hub restart.

[dfl1955]

On my hub, the firewall rules for http and https are separate. I needed to install a second rule for https on the firewalls panel.

BT Home Hub 5 (Type A) | Software version 4.7.5.1.83.8.264

Thanks for your help. <nosarcasm>

[dfl1955]

It seems I had discovered the correct apache configs, the problem was I needed an https firewall rule.

[dfl1955]

Thank you I consider this the best answer. Could whoever marked this as complete change the pointer to @ptrduffy 's reply.