helpSavannah Administration - Support: sr #105050, Add SSL for browsing...


sr #105050: Add SSL for browsing

Submitted by:  Kevin Bube <bube>
Submitted on:  Wed 18 Jan 2006 12:33:54 PM UTC  
Category:  Webpages repositories Priority:  5 - Normal
Severity:  1 - Wish Status:  Wont Do
Assigned to:  Sylvain Beucler <Beuc> Operating System:  None
Open/Closed:  Closed

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Sat 21 Jan 2006 08:22:53 PM UTC, comment #3:

Besides the fact port 443 is occupied, using TLS access to ViewCVS is not worth the resources overhead - especially since we're using our own CA at the moment.

People still can get signed releases from the download area. Or they can bug devs to switch to signed GNU Arch archives :)

Sylvain Beucler <Beuc>In charge of this item.
Thu 19 Jan 2006 09:39:18 AM UTC, comment #2:


the main benefit I see would be that one could be sure that one is really talking to the right server. I think this is definitely a 'nice to have' for a cvs server.

A workaround is to checkout sources via the commandline tool over ssh. Then ssh verifies the server fingerprints. But this is not userfriendly if one just wants to take a quick look at something.

Maybe this is paranoia, but it may be useful for people who live in countries with malicious governments, who dislike for example the security projects hosted on savannah.

Kevin Bube <bube>
Wed 18 Jan 2006 07:58:33 PM UTC, comment #1:


Can you explain me the benefit of this move?
ViewCVS data is publicly available and does not need protection, https requires more CPU resources than plain http, and we need to issue another TLS certificate.

Technically, that would not be possible because we run SSH on port 443 at to help people circumvent ISPs that restrict outgoing traffic.

But I still would be interested in hearing from you about the pros of using https there.

Sylvain Beucler <Beuc>In charge of this item.
Wed 18 Jan 2006 12:33:54 PM UTC, original submission:

Could we have SSL (or TLS) support for and turn all links from the project pages on to https:// links if one browses via this protocol?

Kevin Bube <bube>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


Do you think this task is very important?
If so, you can add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.




Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-01-21 Beuc StatusNeed Info => Wont Do
    Open/ClosedOpen => Closed
2006-01-19 bube Carbon-Copy- => Added bube
2006-01-18 Beuc StatusNone => Need Info
    Assigned toNone => Beuc

Back to the top

Powered by Savane 3.4