Mailinglist Archive: opensuse-buildservice (225 mails)

["Joop Boonen" <joop.boonen@xxxxxxxxxx>]

On Mon, September 26, 2011 11:26 pm, Peter Linnell wrote:
> On 09/22/2011 10:31 AM, Joop Boonen wrote:
> > Hi all,
> >
> > I found some errors in de configurations of the OBS 2.3 server.
> >
> > I've attached the corrected files and the patches.
> >
> > It's related to:
> > Documentation: /usr/share/doc/packages/obs-api/README.SETUP
> > Apache vhosts configuration: /etc/apache2/vhosts.d/obs.conf
> >
> > I've added the api port 81 connection as a quick fix and as the internal
> > doesn't really need to be encrypted.
> >
> > Should I create a bug report for this?
> >
> > Regards,
> >
> > Joop.
> Hi Joop,
>
> No I will commit it soonish.

I found another way to "fix it" and not "jeopardize" security.

--- /srv/www/obs/webui/config/environments/production.rb.orig   2011-09-21
12:57:27.000000000 +0200
+++ /srv/www/obs/webui/config/environments/production.rb        2011-09-22
21:16:57.620321787 +0200
@@ -15,8 +15,8 @@

 # Host name gets changed by obsapisetup on each boot
 FRONTEND_HOST = "localhost"
-FRONTEND_PORT = 81
-FRONTEND_PROTOCOL = 'http'
+FRONTEND_PORT = 444
+FRONTEND_PROTOCOL = 'https'

If this is an option can this be put in git or in
/usr/share/doc/packages/obs-api/README.SETUP

> Thanks,
>
> Peter
> --

Joop.

-- 
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-buildservice+help@xxxxxxxxxxxx