search

eclipse-theia / theia

Eclipse Theia is a cloud & desktop IDE framework implemented in TypeScript.
http://theia-ide.org
Eclipse Public License 2.0
19.55k stars 2.46k forks source link

Theia and SSL #2414

Open jopit opened 5 years ago

jopit commented 5 years ago

When running browser-based Theia using the --ssl option, it requires also specifying the location on the file system of the certificate and the certificate's private key

However, anyone using Theia from the browser can then get access to the cert and the key, either by using the terminal, or by setting the workspace to include the location where they are stored.

This seems to be a bit of an exposure. Is there a way to mitigate this?

AlexTugarev commented 5 years ago

Consider using a proxy (e.g. nginx) with ssl configured on your server.

passion123 commented 3 weeks ago

Consider using a proxy (e.g. nginx) with ssl configured on your server. While using the nginx with ssl the codes can't show successfully.Is there some way to solve this ? Here is a discusstion ,you can also follow it