Re: Jenkins master-slave connection through Java Web Start - security concerns

2013-07-02 Thread Costin Caraivan
Thanks!
_
Costin Caraivan


On Mon, Jul 1, 2013 at 6:26 PM, Kevin Fleming (BLOOMBERG/ 731 LEXIN) 
kpflem...@bloomberg.net wrote:

 The connection between the slave and the master, when using JNLP to start
 slaves, is not a secure channel.


 - Original Message -
 From: jenkinsci-users@googlegroups.com
 To: jenkinsci-users@googlegroups.com
 At: Jul 1 2013 07:51:55

 Hello,

 I'm not sure I understand entirely the Jenkins slave connection process
 for Java Web Start.
 When connecting slaves through Java Web Start the slave connects initially
 to the Jenkins HTTP/HTTPS port, to get the JNLP file.
 After that, the actual slave connection is on a different port.

 First of all, I'm not sure I understand the initial connection process -
 is the secret used for the connection a sort of public key?
 Secondly, is the actual slave connection secure? Is it actually over HTTPS
 or SSH or another secure channel?

 Thank you,
 _
 Costin Caraivan

 --
 You received this message because you are subscribed to the Google Groups
 Jenkins Users group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to jenkinsci-users+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.



  --
 You received this message because you are subscribed to the Google Groups
 Jenkins Users group.
 To unsubscribe from this group and stop receiving emails from it, send an
 email to jenkinsci-users+unsubscr...@googlegroups.com.
 For more options, visit https://groups.google.com/groups/opt_out.




-- 
You received this message because you are subscribed to the Google Groups 
Jenkins Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.




Jenkins master-slave connection through Java Web Start - security concerns

2013-07-01 Thread Costin Caraivan
Hello,

I'm not sure I understand entirely the Jenkins slave connection process for
Java Web Start.
When connecting slaves through Java Web Start the slave connects initially
to the Jenkins HTTP/HTTPS port, to get the JNLP file.
After that, the actual slave connection is on a different port.

First of all, I'm not sure I understand the initial connection process - is
the secret used for the connection a sort of public key?
Secondly, is the actual slave connection secure? Is it actually over HTTPS
or SSH or another secure channel?

Thank you,
_
Costin Caraivan

-- 
You received this message because you are subscribed to the Google Groups 
Jenkins Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.