Re: Jenkins master-slave connection through Java Web Start - security concerns

2013-07-02 Thread Costin Caraivan
Thanks!
_
Costin Caraivan


On Mon, Jul 1, 2013 at 6:26 PM, Kevin Fleming (BLOOMBERG/ 731 LEXIN) <
kpflem...@bloomberg.net> wrote:

> The connection between the slave and the master, when using JNLP to start
> slaves, is not a secure channel.
>
>
> - Original Message -
> From: jenkinsci-users@googlegroups.com
> To: jenkinsci-users@googlegroups.com
> At: Jul 1 2013 07:51:55
>
> Hello,
>
> I'm not sure I understand entirely the Jenkins slave connection process
> for Java Web Start.
> When connecting slaves through Java Web Start the slave connects initially
> to the Jenkins HTTP/HTTPS port, to get the JNLP file.
> After that, the actual slave connection is on a different port.
>
> First of all, I'm not sure I understand the initial connection process -
> is the secret used for the connection a sort of public key?
> Secondly, is the actual slave connection secure? Is it actually over HTTPS
> or SSH or another secure channel?
>
> Thank you,
> _
> Costin Caraivan
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>
>  --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Jenkins master-slave connection through Java Web Start - security concerns

2013-07-01 Thread Costin Caraivan
Hello,

I'm not sure I understand entirely the Jenkins slave connection process for
Java Web Start.
When connecting slaves through Java Web Start the slave connects initially
to the Jenkins HTTP/HTTPS port, to get the JNLP file.
After that, the actual slave connection is on a different port.

First of all, I'm not sure I understand the initial connection process - is
the secret used for the connection a sort of public key?
Secondly, is the actual slave connection secure? Is it actually over HTTPS
or SSH or another secure channel?

Thank you,
_
Costin Caraivan

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.