secure.wikimedia.org used to be an HTTPS proxy, providing users a secure alternative to access the wiki projects of the Wikimedia Foundation.
After the main cluster was converted to support HTTPS for all traffic, secure.wikimedia.org was replaced with a simple redirect service for the old URL structure. For example, https://secure.wikimedia.org/wikipedia/de/wiki/Crowdsourcing redirects to https://de.wikipedia.org/wiki/Crowdsourcing.
|This page contains historical information. It is probably no longer true. 2009|
secure.wikimedia.org provided HTTPS/SSL secured access to the Wikimedia Foundation wikis, like Wikipedia, Wiktionary, etc.
The service ran on the singer host in the Pmtpa cluster, on Apache 2.2 with an SSL certificate and VirtualHost for
secure.wikimedia.org. Hits to this interface were then proxied to the internal load balancer and from there to regular Apaches via apache.pmtpa.wmnet, which serve the backend requests just like unencrypted hits.
Apache configuration is in /etc/apache2/ Running a custom-compiled Apache 2.2 in /usr/local/apache22
- Wikis are proxied.
- A special service IP is used.
Relevant config files...
- /etc/apache2/sites-available/secure.wikimedia.org on singer
- wikimedia-ssl-backend.conf on all apaches
Modules proxy and proxy_http should be enabled with command a2enmod.
<Proxy *> Allow from all </Proxy> ProxyRequests Off ProxyPreserveHost On ProxyPass /otrs ! ProxyPass /otrs-2.1.3 ! ProxyPass /otrs-web ! ProxyPass / http://apaches.pmtpa.wmnet/ ProxyVia On
For wikis, the frontend proxies to the general Apache servers in PMTPA. These hit a VHOST configured by wikimedia-ssl-backend.conf which does a rewrite match on the funny directories and sets an environment variable used by CommonSettings.php to decode the correct host.
The index page at https://secure.wikimedia.org/ was be editable on Meta-Wiki, served using mod_rewrite and extract2.php.