search

dragonflydb / dragonfly

A modern replacement for Redis and Memcached
https://www.dragonflydb.io/
Other
25.28k stars 910 forks source link

https not properly accessible from http://static.dragonflydb.io/data-plane/status_page.css #3572

Open kostasrim opened 2 weeks ago

kostasrim commented 2 weeks ago

possibly related to #1926

image

kostasrim commented 2 weeks ago

Will add more details soon, once I have them from the person reported this on Discord

kostasrim commented 2 weeks ago

@seeronline what you attached is a Malware and I reported you on GH

Pixelaters commented 2 weeks ago

how to replicate: download the binary for ubuntu as per the installation guide https://www.dragonflydb.io/docs/getting-started/binary

run the binary with parameters for TLS specifying your certificates: sudo dragonfly --tls --tls_key_file=localhost.pem --tls_cert_file=localhost.pem --requirepass=admin

Navigate to https://localhost:6379/

You should receive an error in developer tools looking like this: image

because of the above error although the connection is https, its not fully secure because some content is still being served over http

kostasrim commented 2 weeks ago

thank you @Pixelaters for reporting this