Re: [viewvc-users] Security certificate issues [SEC=UNCLASSIFIED]
"C. Michael Pilato" <[email protected]>
| Newsgroups | gmane.comp.version-control.cvs.viewcvs.user |
|---|---|
| Organization | CollabNet, Inc. |
| Message-ID | <[email protected]> |
On 02/10/2011 10:00 PM, [email protected] wrote: >> It doesn't appear that you are requiring login credentials for your ViewVC >> site, so is it necessary that you expose it via SSL at all? > > We will require login to be able to submit to the repository. Hence the > SSL. Is there a way of configuring ViewVC that allows people to look > without using https but to submit they have to login using https? It's quite common for folks to setup Subversion such that anonymous read access is over HTTP, and authenticated read/write access is via HTTPS only. (I actually really like that paradigm, and prefer to use it myself.) But ViewVC doesn't allow for "submit" -- it's a repository *browser* only. So if all the repository contents are world-readable anyway, then there's nothing to be gained by offering your ViewVC service over SSL. Meanwhile, you're incurring a) this annoying certificate error and b) the calculation overhead of encryption/decryption. -- C. Michael Pilato <[email protected]> CollabNet <> www.collab.net <> Distributed Development On Demand ------------------------------------------------------ http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2703439 To unsubscribe from this discussion, e-mail: [[email protected]].
signature.asc
(application/pgp-signature, 198 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAk1VZYAACgkQokEGqRcG/W6W9QCfbYaVodgj3p+3R1xWNvYL4Vvw oKkAn3gTF01MqiJsYlsXodWH2ifLshAG =bj6h -----END PGP SIGNATURE-----