Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /usr/share/doc/m2crypto-0.16/demo/Zope27/ drwxr-xr-x |
Viewing file: INSTALL.txt (5.09 KB) -rw-r--r-- Select action/file-type: (+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) | ========================================= ZServerSSL for Zope 2.7.0b2 ========================================= :Author: Ng Pheng Siong :Id: $Id$ :Date: $Date$ :Web-Site: http://sandbox.rulemaker.net/ngps/zope/zssl/ .. contents:: Directories ----------------------- This distribution is contained in ``m2crypto-0.12/demo/Zope27/``. Its directory structure assumes the following: - Zope 2.7.0b2 is installed in <install-dir>. - An instance has been created in <instance-home>. <install-dir> ----------------------- The following files are to be copied to the corresponding directories in your <install-dir>: - install_dir/lib/python/ZServer/HTTPS_Server.py - install_dir/lib/python/ZServer/medusa/https_server.py The following patch files are to be applied to the corresponding directories in your <install-dir>: - install_dir/lib/python/ZServer/__init__.py.patch - install_dir/lib/python/ZServer/component.xml.patch - install_dir/lib/python/ZServer/datatypes.py.patch <instance-home> ----------------------- The following files are to be copied to the corresponding directories in your <instance-home>: - instance_home/ssl/ca.pem - instance_home/ssl/server.pem - instance_home/ssl/dh1024.pem These are example files. For more information on them, consult the ZServerSSL HOWTO for Zope 2.6. The following patch files are to be applied to the corresponding directories in your <instance-home>: - instance_home/README.txt.patch - instance_home/etc/zope.conf.patch (Patching README.txt is optional.) There appears to be a bug in Zope 2.7.0b2, where INSTANCE_HOME in a running Zope points to <install-dir>, not <instance-home>. Workaround this with the following: :: $ (cd <install-dir>; ln -s <instance-home>/ssl) Launch ZServerSSL ------------------- :: $ <instance-home>/bin/runzope Testing --------- Below, we assume your Zope server is running on ``localhost``. HTTPS ~~~~~~~ This testing is done with Mozilla 1.1 on FreeBSD. 1. With a browser, connect to https://localhost:8443/. Browse around. Check out your browser's HTTPS informational screens. 2. Connect to https://localhost:8443/manage. Verify that you can access Zope's management functionality. WebDAV-over-HTTPS ~~~~~~~~~~~~~~~~~~~ This testing is done with Cadaver 0.21.0 on FreeBSD. :: $ cadaver https://localhost:8443/ WARNING: Untrusted server certificate presented: Issued to: M2Crypto, SG Issued by: M2Crypto, SG Do you wish to accept the certificate? (y/n) y Authentication required for Zope on server `localhost': Username: admin Password: dav:/> ls Listing collection `/': succeeded. Coll: Control_Panel 0 Sep 28 00:38 Coll: temp_folder 0 Sep 28 17:30 acl_users 0 Sep 28 00:38 browser_id_manager 0 Sep 28 00:38 error_log 0 Sep 28 00:38 index_html 28 Sep 28 00:39 session_data_manager 0 Sep 28 00:38 standard_error_message 1189 Sep 28 00:39 standard_html_footer 18 Sep 28 00:39 standard_html_header 82 Sep 28 00:39 standard_template.pt 282 Sep 28 00:39 dav:/> quit Connection to `localhost' closed. $ Python with M2Crypto ~~~~~~~~~~~~~~~~~~~~~~ This testing is done with M2Crypto 0.12 and Python 2.2.3 on FreeBSD. HTTPS ``````` >>> from M2Crypto import Rand, SSL, m2urllib >>> url = m2urllib.FancyURLopener() >>> url.addheader('Connection', 'close') >>> u = url.open('https://127.0.0.1:8443/') send: 'GET / HTTP/1.1\r\nHost: 127.0.0.1:8443\r\nAccept-Encoding: identity\r\nUser-agent: Python-urllib/1.15\r\nConnection: close\r\n\r\n' reply: 'HTTP/1.1 200 OK\r\n' header: Server: ZServerSSL/0.12 header: Date: Sun, 28 Sep 2003 09:40:14 GMT header: Content-Length: 3055 header: Etag: header: Content-Type: text/html header: Connection: close >>> while 1: ... data = u.read() ... if not data: break ... print data ... :: [blah blah blah] <p> Go directly to the <a href="/manage" target="_top"> Zope Management Interface</a> if you'd like to start working with Zope right away. <strong>NOTE: Some versions of Microsoft Internet Explorer, (specifically IE 5.01 and early versions of IE 5.5) may have problems displaying Zope management pages. If you cannot view the management pages, try upgrading your IE installation to the latest release version, or use a different browser.</strong> </p> </li> <li> <p> Find out about <a href="http://www.zope.com/" target="_new">Zope Corporation</a>, the publishers of Zope. </p> </li> </ul> </body> </html> >>> u.close() >>> XMLRPC-over-HTTPS ``````````````````` >>> from M2Crypto.m2xmlrpclib import Server, SSL_Transport >>> zs = Server('https://127.0.0.1:8443/', SSL_Transport()) >>> print zs.propertyMap() [{'type': 'string', 'id': 'title', 'mode': 'w'}] >>> Conclusion ------------ Yes, it works! ;-) |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0116 ]-- |