mainSavannah Administration - Support: sr #108556, Enable SSL access to savannah

 
 

sr #108556: Enable SSL access to savannah

Submitter:  Giuseppe Scrivano <gscrivano>
Submitted:  Tue 22 Apr 2014 04:20:03 PM UTC
Votes: 1
 
Category:  Source code repositories - web browsing Priority:  5 - Normal
Severity:  2 - Minor Status:  Done
Privacy:  Public Assigned to:  agn
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 17 Feb 2017 09:20:55 PM UTC, comment #3: 

Savannah now supports HTTPS access for source-code browsing and anonymous cloning.

closing this ticket.
 - assaf

Assaf Gordon <agn>
Site Administrator
Wed 23 Apr 2014 11:19:29 AM UTC, comment #2: 

It would be the first line of defence against man-in-the-middle attacks, for one. wget is an essential piece of software for me, and I compile it myself. I also like to keep up with the git versions instead of the release ones, 'cause the git versions have never given me problems yet, and I can submit bug reports if they do.

Another is that git ports are blocked on many networks with admins refusing to open them upon request (as is the case with my own work network). If https is enabled, then it becomes trivial to access the repo.

All in all, it doesn't hurt, and it does improve both security and accessibility.

Savyasachee Jha <genghizkhan91>
Tue 22 Apr 2014 09:29:47 PM UTC, comment #1: 

I don't understand.  What is the security concern for accessing the git repository?  Please explain further.

Bob Proulx <rwp>
Site Administrator
Tue 22 Apr 2014 04:20:03 PM UTC, original submission:  

FYI, I am forwarding this message from bug-wget@gnu.org:

From: Darshit Shah <darnir@gmail.com>
Subject: [Bug-wget] [Bug-Wget] Enable SSL access to savannah
To: bug-wget <bug-wget@gnu.org>
Date: Sat, 19 Apr 2014 13:29:18 +0200 (3 days, 4 hours, 49 minutes ago)

I just noticed that the git repository for Wget on Savannah does not
have SSL enabled on it. Hence, the only way to access both the cgit
interface and the git repository is through http which isn't too
secure.

Could we have HTTPS access enabled on those servers?

--
Thanking You,
Darshit Shah


Giuseppe Scrivano <gscrivano>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by agn (Posted a comment)
  • -email is unavailable- added by darnir (Originally requested feature)
  • -email is unavailable- added by genghizkhan91 (Posted a comment)
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by gscrivano (Submitted the item)
  •  

    There is 1 vote so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-02-17 agn StatusNeed Info Done
        Assigned torwp agn
        Open/ClosedOpen Closed
    2014-04-27 darnir Carbon-Copy- Added darnir
    2014-04-22 rwp StatusNone Need Info
        Assigned toNone rwp

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code