search

ckrintz / appscale

Automatically exported from code.google.com/p/appscale
0 stars 0 forks source link

SSL doesn't work #139

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
If the user specifies that certain pages should be secure, these pages
should be only accessed over SSL. Since the SDK doesn't generate SSL
certificates or enforce this, neither do we.

Need to protect access to these pages correctly.

Original issue reported on code.google.com by shattere...@gmail.com on 29 Dec 2009 at 7:49

GoogleCodeExporter commented 9 years ago 
Demoted priority to medium since the changes will likely take too long for this
release. When we want to take this issue on, we will need to do the following:

1) Change the AppController to write nginx routes that use SSL as specified by 
the
application's app.yaml file (not too much work, see static route code).

2) Change Google App Engine to support incoming HTTPS requests (much more 
difficult,
right now the SDK ignores secure routes).

3) Change the AppLoadBalancer's nginx config to use HTTPS on login route (not 
too
difficult, also need to see if other routes need to be protected).

Original comment by shattere...@gmail.com on 9 Apr 2010 at 3:35

GoogleCodeExporter commented 9 years ago

Original comment by nlak...@gmail.com on 6 Sep 2011 at 9:25