Bug #3742

Site's login should be secured with SSL

Added by Igal Koshevoy about 2 years ago. Updated 2 months ago.

Status:Closed Start date:05/07/2010
Priority:Normal Due date:
Assignee:- % Done:

0%

Category:module site Spent time: -
Target version:-
Keywords: Affected URL:
Branch:
Votes: 1

History

Updated by Igal Koshevoy about 2 years ago

  • Tracker changed from Bug to Feature
  • Status changed from Unreviewed to Accepted

Updated by Igal Koshevoy almost 2 years ago

  • Target version set to 54

Updated by Igal Koshevoy almost 2 years ago

  • Assignee deleted (Igal Koshevoy)

Updated by Anonymous over 1 year ago

  • Target version changed from 54 to 80

Updated by Igal Koshevoy over 1 year ago

  • Target version changed from 80 to 73

This is a small, but important task and I’m prioritizing it sooner.

Zach has already setup SSL support on the server that runs the Forge, which was the hardest part of this task.

All we need to do is tell the Rails app to use SSL for forms that deal with passwords.

We should use the site-specific secrets.yml configuration file to tell the app if it should use SSL, and default to not using it.

Some Rails plugins that may be useful for doing conditional SSL:

  • http://github.com/bcurren/ssl_requirement
  • http://agilewebdevelopment.com/plugins/secure_actions

Updated by Zach Leslie over 1 year ago

Any update on this ticket?

Updated by Igal Koshevoy over 1 year ago

Re: Any update on this ticket?

Zach: I was taken off Forge a bit after this ticket was last updated. Please work with Teyo and Nigel so they can decide whether to add this to the development team’s queue.

Updated by Zach Leslie over 1 year ago

  • Tracker changed from Feature to Bug

Thank you, Igal.

On Fri, Dec 17, 2010 at 2:31 PM, tickets@puppetlabs.com wrote:

Issue #3742 has been updated by Igal Koshevoy.

Re: Any update on this ticket?

Zach: I was taken off Forge a bit after this ticket was last updated. Please work with Teyo and Nigel so they can decide whether to add this to the development team’s queue.


Feature #3742: Site’s login should be secured with SSL

Author: Igal Koshevoy Status: Accepted Priority: Normal Assignee: Category: module site Target version: 0.2 Keywords: Branch: Affected URL:


You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account

Updated by Ben Hughes 4 months ago

  • Status changed from Accepted to Closed

This is done. Has been for ages. (are you still getting these Igal?) (:

Updated by Daniel Pittman 2 months ago

  • Target version deleted (73)

Also available in: Atom PDF