[Bug 520270] [NEW] Support SSL for web services

Robert Collins robertc at robertcollins.net
Thu Feb 11 05:08:31 GMT 2010


Public bug reported:

The 8443 admin web page has an SSL certificate, but there doesn't seem
to be a SSL web services port (or if it is in fact 8443, then that isn't
documented).

While you can't replay or forge requests made over port 80 | 8773, you
can sniff  and observe them, and some organisations and software refuse
to do non-SSL web service requests. Landscape, for instance, requires
users of UEC to setup a tunnel so that it is not making cleartext
requests.

We should ship SSL by default, with a just-in-time self signed cert, and
clear instructions for upgrading to a publically issued certificate.

** Affects: eucalyptus (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Support SSL for web services
https://bugs.launchpad.net/bugs/520270
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.



More information about the Ubuntu-server-bugs mailing list