Public bug reported:
The 8443 admin web page has an SSL certificate, but there doesn't seem
to be a SSL web services port (or if it is in fact 8443, then that isn't
documented).
While you can't replay or forge requests made over port 80 | 8773, you
can sniff and observe them, and some organisations and software refuse
to do non-SSL web service requests. Landscape, for instance, requires
users of UEC to setup a tunnel so that it is not making cleartext
requests.
We should ship SSL by default, with a just-in-time self signed cert, and
clear instructions for upgrading to a publically issued certificate.
** Affects: eucalyptus (Ubuntu)
Importance: Undecided
Status: New
--
Support SSL for web services
https://bugs.launchpad.net/bugs/520270
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
