Use https connections to fluidinfo.com, when appropriate

Bug #742557 reported by Terry Jones
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fluidinfo Explorer
New
Undecided
Unassigned

Bug Description

We have enabled https connections to the explorer. There are a few more things that should be done.

The explorer should always use https when talking to fluiddb.fluidinfo.com because otherwise it is sending the user's credentials in the clear.

nginx is passing an X-Forwarded-Protocol to the explorer, with value 'http' or 'https'. The Explorer should make sure any links it generates to itself (e.g., to open a new explorer window) keep the same protocol. So if a user comes in via https, they continue to be using https.

Revision history for this message
PA Parent (paparent) wrote :

To talk to fluiddb.fluidinfo.com with https, we need either two thing:

A) install pyopenssl, which is needed by eventlet.

B) install python 2.6+. This one could be installed in another location (e.g. /opt/python2.6). It's just a ./configure --with-prefix=/opt/python2.6 .... IIRC :)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.