[GH-ISSUE #526] Security: SSL #393

Closed
opened 2026-02-27 16:39:07 +03:00 by kerem · 2 comments
Owner

Originally created by @kaystrobach on GitHub (Mar 19, 2015).
Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/526

You Installation instructions should cover the use of SSL to protect the traffic, as your software is a highly important peace of infrastructure, which is worth gathering the data to penetrate a companies infrastructure 😄

Currently it's quite easy to setup SSL for most functions, but the VNC stuff fails for me 😠

  • There are free certificates available via startssl.com
  • you need to configure nginx for ssl (if wanted i can post a sample config)
  • what i do not get working is the use of sockets for the www-data user (but ssh is fine)
  • needed to change the permissions on the .ssh folder for www-data user
  • any hint, what's needed to get the vnc websockets working via nginx as well, port 8000?
    ** works if if i use manage.py and start the server on a different port 😠
Originally created by @kaystrobach on GitHub (Mar 19, 2015). Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/526 You Installation instructions should cover the use of SSL to protect the traffic, as your software is a highly important peace of infrastructure, which is worth gathering the data to penetrate a companies infrastructure :smile: Currently it's quite easy to setup SSL for most functions, but the VNC stuff fails for me :angry: - There are free certificates available via startssl.com - you need to configure nginx for ssl (if wanted i can post a sample config) - what i do not get working is the use of sockets for the www-data user (but ssh is fine) - needed to change the permissions on the .ssh folder for www-data user - any hint, what's needed to get the vnc websockets working via nginx as well, port 8000? *\* works if if i use manage.py and start the server on a different port :angry:
kerem closed this issue 2026-02-27 16:39:07 +03:00
Author
Owner

@sammcj commented on GitHub (Apr 4, 2015):

+1

Might relate to #486 , #538, #513, #418, #349

<!-- gh-comment-id:89690404 --> @sammcj commented on GitHub (Apr 4, 2015): +1 Might relate to #486 , #538, #513, #418, #349
Author
Owner

@kaystrobach commented on GitHub (Jun 15, 2015):

is possible to workaround now ... so closing this issue.

in the meantime i suggest to use ssh to tunnel to the webvirtmgr instance and just allow access from localhost interface!

<!-- gh-comment-id:112088422 --> @kaystrobach commented on GitHub (Jun 15, 2015): is possible to workaround now ... so closing this issue. in the meantime i suggest to use ssh to tunnel to the webvirtmgr instance and just allow access from localhost interface!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/webvirtmgr#393
No description provided.