[OE-core] [PATCH] send-error-report: Use https instead of http protocol
Richard Purdie
richard.purdie at linuxfoundation.org
Mon Mar 4 09:23:42 UTC 2019
On Mon, 2019-03-04 at 15:50 +0800, Robert Yang wrote:
> Hi Khem,
>
> We have an internal error web server, this patch breaks it:
>
> You're accessing the development server over HTTPS, but it only
> supports HTTP
>
> So I tried to use runsslserver, but it doesn't work either since the
> host is
> Ubuntu 14.04 (python 2.7.6):
>
> $ python manage.py runsslserver
>
> [snip]
> ssl_version=ssl.PROTOCOL_TLSv1_2,
> AttributeError: 'module' object has no attribute 'PROTOCOL_TLSv1_2'
>
> This is because python is old.
>
> I think that make it default to https would make the server harder to
> set up,
> so is it possible to:
>
> * Make it default to http, and add an option such as --https (or --
> ssl) for https
>
> Or:
>
> * Add an option such as --no-ssl to make it use http.
>
> I prefer the first one since https server is harder to setup than
> http in django. I can work on it if no objections.
At this point the project does require python3 so python2 being old
shouldn't be a reason to be changing this.
The project also needs to be seen to encourage secure practises so I
think https should be the default but adding an option to use http
should be ok.
Cheers,
Richard
More information about the Openembedded-core
mailing list