Re: [sleuthkit-users] Autopsy over SSL?

[Brian C. <ca...@sl...>]

SSH is the approach that I have tried in the past as well.

I previously looked into incorporating SSL into Autopsy, but that 
created a lot more dependencies on OpenSSL existing etc.  TSK now 
requires OpenSSL for the new image formats that it supports, so it might 
not be that difficult to do now.  I'll look into it.

brian


Angus Marshall wrote:
> A little idea for everyone - how about running it using SSH rather than HTTPS ? 
> 
> I've just tried 
> 
>                ssh -L 1234:127.0.0.1:9999 amarshall@myhost 
> 
> to log in to one of my workstations and launch autopsy
> 
> and then aimed a browser on the remote workstation to http://localhost:1234/autopsy
> 
> it works - my autopsy session on "myhost" is visible to the remote machine and
> totally dependent on the ssh tunnel existing between the two hosts. 
> 
> This gives a transient session, requiring an authentication process from the
> remote end.
> 
> 
> On Mon Aug 21 21:01 , 'Brooks, Prentis' <pre...@tw...> sent:
> 
>> Here is a sample from the apache 2.2 documentation that I have modified to
> reflect how I did this before.  These commands have not changed since 2.0, so
> this will work.
>> ProxyRequests Off
>>
>> # This is to control access, I highly recommend configuring apache to require
> some level of authentication before 
>> # proxying the connections.
>>
>> Order deny,allow
>> Allow from all
>>
>>
>> ProxyPass /autopsy http://127.0.0.1/autopsy
>> ProxyPassReverse /autopsy http://127.0.0.1/autopsy
>>
>>
>>
> 
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org