Re: [sleuthkit-users] Autopsy over SSL?

[Angus M. <an...@n-...>]

A little idea for everyone - how about running it using SSH rather than HTTPS ? 

I've just tried 

               ssh -L 1234:127.0.0.1:9999 amarshall@myhost 

to log in to one of my workstations and launch autopsy

and then aimed a browser on the remote workstation to http://localhost:1234/autopsy

it works - my autopsy session on "myhost" is visible to the remote machine and
totally dependent on the ssh tunnel existing between the two hosts. 

This gives a transient session, requiring an authentication process from the
remote end.


On Mon Aug 21 21:01 , 'Brooks, Prentis' <pre...@tw...> sent:

>Here is a sample from the apache 2.2 documentation that I have modified to
reflect how I did this before.  These commands have not changed since 2.0, so
this will work.
>
>ProxyRequests Off
>
># This is to control access, I highly recommend configuring apache to require
some level of authentication before 
># proxying the connections.
>
>Order deny,allow
>Allow from all
>
>
>ProxyPass /autopsy http://127.0.0.1/autopsy
>ProxyPassReverse /autopsy http://127.0.0.1/autopsy
>
> 
>