Configure demos with ssl

[Sergio Belkin]

Hi folks,

I know that BBB doesn't support SSL, however I'd want to make only a part of the server ssl and is the demo app, I mean I'd want something like:

https://example.com/demo/demo3.jsp

Doing that the password traveled went through ssl

I have little experience en nginx, please could you help me?

Thanks in advance!

--
--
Sergio Belkin  http://www.sergiobelkin.com
Watch More TV http://sebelk.blogspot.com
LPIC-2 Certified - http://www.lpi.org

[Calvin Walton]

On Fri, 2013-05-24 at 12:23 -0300, Sergio Belkin wrote:
> Hi folks,
>
>
> I know that BBB doesn't support SSL, however I'd want to make only a part
> of the server ssl and is the demo app, I mean I'd want something like:
>
> https://example.com/demo/demo3.jsp
>
> Doing that the password traveled went through ssl
>
> I have little experience en nginx, please could you help me?
>
> Thanks in advance!

Even if you change this demo page to be served over SSL, it won't
actually prevent the meeting password from being sent over a non-ssl
connection. The way that the BigBlueButton API works, you get redirected
to a non-ssl URL that looks like
http://example.com/bigbluebutton/api/join?...&password=<password> and
that is what actually loads you into the meeting.

BigBlueButton doesn't really provide any security guarantees; if you
want to ensure privacy, we currently recommend that you set it up behind
a firewall with encrypted VPN access.

--
Calvin Walton <calvin...@kepstin.ca>
BigBlueButton Developer