RE: [viewvc-users] Security certificate issues [SEC=UNCLASSIFIED]

On Saturday, 12 February 2011 3:36 AM C. Michael Pilato wrote:

> On 02/10/2011 10:00 PM, [email protected] wrote:
> >> It doesn't appear that you are requiring login credentials
> for your ViewVC
> >> site, so is it necessary that you expose it via SSL at all?
> >
> > We will require login to be able to submit to the
> repository.  Hence the
> > SSL. Is there a way of configuring ViewVC that allows people to look
> > without using https but to submit they have to login using https?
>
> It's quite common for folks to setup Subversion such that
> anonymous read
> access is over HTTP, and authenticated read/write access is
> via HTTPS only.
>  (I actually really like that paradigm, and prefer to use it myself.)
>

That is great news. I have configured apache to have ViewVC on http and subversion https. That is exactly what I wanted.
> But ViewVC doesn't allow for "submit" -- it's a repository
> *browser* only.
> So if all the repository contents are world-readable anyway,
> then there's
> nothing to be gained by offering your ViewVC service over
> SSL.  Meanwhile,
> you're incurring a) this annoying certificate error and b)
> the calculation
> overhead of encryption/decryption.
>

Yes. This makes sense and so the configuration for ViewVC on http works well.

Thanks for all your help.


John

> --
> C. Michael Pilato <[email protected]>
> CollabNet   <>   www.collab.net   <>   Distributed
> Development On Demand
>
>

------------------------------------------------------
http://viewvc.tigris.org/ds/viewMessage.do?dsForumId=4255&dsMessageId=2703776

To unsubscribe from this discussion, e-mail: [[email protected]].