• Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login
  • Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login

Feature request for FOG 1.6.x - Move WebUI to HTTPS protocol

Scheduled Pinned Locked Moved
Feature Request
2
4
345
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    george1421 Moderator
    last edited by Sep 26, 2020, 1:45 PM

    Consider switching over to HTTPS for the main FOG WebUI interface and moving the FOG Clients off the HTTP port to a dedicated port above port 1024. The FOG clients could technically stay on port 80 while the main web ui site moves to https. A filter could be added to port 80 to block non client traffic it would be akin to the block setup on the hostinfo.php to keep people with browsers from accessing this file. The FOG clients would just use a custom http header unique to the FOG Client.

    Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

    1 Reply Last reply Reply Quote 1
    • S
      Sebastian Roth Moderator
      last edited by Sep 28, 2020, 4:15 PM

      @george1421 The fog-client is able to communicate over HTTPS and I was thinking about getting rid of the internal hand made crypto stuff and just rely on HTTPS instead.

      Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

      Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

      1 Reply Last reply Reply Quote 0
      • G
        george1421 Moderator
        last edited by Sep 28, 2020, 4:23 PM

        @Sebastian-Roth said in Feature request for FOG 1.6.x - Move WebUI to HTTPS protocol:

        internal hand made crypto stuff and just rely on HTTPS instead

        This may be hard since isn’t the certificate compiled into the fog client or does it use the Microsoft certificate store to house the certificate?

        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

        1 Reply Last reply Reply Quote 0
        • S
          Sebastian Roth Moderator
          last edited by Sep 28, 2020, 5:19 PM

          @george1421 We use the certificate store. Though this is something else I was hoping to change in the future because Mono on Linux and Mac OS X have a long history of issues with the certificate store and we might think about keeping the certs just in files on the disk. I have not had the time to think this through. Might be a dead road…

          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

          1 Reply Last reply Reply Quote 0
          • 1 / 1
          1 / 1
          • First post
            4/4
            Last post

          156

          Online

          12.0k

          Users

          17.3k

          Topics

          155.2k

          Posts
          Copyright © 2012-2024 FOG Project