Platform: Linux, Apache 2, MySQL 5.0, MODx 0.9.5, soon to be upgraded to 0.9.6.2b.
Using a self-signed SSL Certificate.
Using Encryption snippet.
Need the following work done:
1. Troubleshoot Encryption snippet and .htaccess file to eliminate or reduce frequency of security certificate warning.
2. Troubleshoot configuration file(s) to address rewrite issues.
3. Write a small script that determines the browser and installs the security certificate. I know it is as simple as attempting to load the CRT file for Firefox, Mozilla, Opera, but I need a script that will reduce the number of screens displayed to add the certificate for IE users (IE6 and IE7).
These issues are referenced in the following threads:
http://modxcms.com/forums/index.php/topic,10026.msg132323.html#msg132323
http://modxcms.com/forums/index.php/topic,24052.msg148040.html#msg148040
http://modxcms.com/forums/index.php/topic,10026.msg148309.html#msg148309
The Encryption snippet is installed and working but I’m getting the rewrite issues in some cases. I’m also getting the secure/insecure elements issue as well.
There is also an issue with the Security Certificate warning that appears. We have a self-signed certificate and provide manual instructions on how to install the root certificate, but I’d like to have this automated (for IE) as described/demonstrated at CACert.org:
http://www.cacert.org/index.php?id=3
http://www.cacert.org/index.php?id=17
Install a Root Certificate using Internet Explorer and the CEnroll ActiveX control. This avoids the Microsoft Certificate Installation wizard and all of its complexity and extra screens for users. This however will ONLY work for Microsoft Internet Explorer.
Here is another reference to automating the installation of the certificate in IE:
http://pkidev.internet2.edu/rootcerts/
A few members of the client’s team are concerned about the security warning and I would like to automate the process as much as possible.
I already have a snippet that checks to see if this is the first login for a user and directs them to change their password. I would like the script that installs the securty certificate to check to see if the file is installed and proceed to do so if not already. I realize I cannot make this a "silent" installation, but I would like to eliminate the extraneous screens, etc. that the IE wizard presents.
If you are interested, please contact me at my profile’s email address.
Anticipated start time: As soon as possible
Anticipated duration: Would like to have completed by end of August at the latest.
Payment: Via PayPal or Rentacoder, if you like.
Budget: To be discussed.
Thanks.
