Re: Oauth support
Ralf Schlatterbeck <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Nov 30, 2022 at 09:05:21AM +0100, Ralf Schlatterbeck wrote: > Ah, the script currently uses a https localhost url (which must be > registered in the cloud). For the certificate+key is uses the (debian > specific) snakeoil cert in /etc/ssl/private and /etc/ssl/cert. The > private directory is only accessible to group 'ssl-cert', so the user > calling that script must either have this group or some other > permissions to make this work. So a good idea would be to add options to > override the default cert and key. > > And it seems for localhost urls http is allowed (all other urls require > https), so the code should decide to use ssl only when the redirect URL > is https (and have an option to override this if you're using a > complicated setup with proxying). I've just made these changes and added some more docs to the --help text. -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: www.runtux.com Reichergasse 131, A-3411 Weidling email: [email protected]