Project

General

Profile

Feature #38405

Add secure websocket access to middleware

Added by Ken Moore over 1 year ago. Updated 8 months ago.

Status:
Done
Priority:
No priority
Assignee:
Waqar Ahmed
Category:
Middleware
Target version:
Estimated time:
Severity:
Medium
Reason for Closing:
Reason for Blocked:
Needs QA:
No
Needs Doc:
No
Needs Merging:
No
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

Related projects 2 projects

Description

Add support for secure websocket access to middlewared (wss://).
This can use a self-signed certificate for the purposes of TrueView (it is trivial to auto-accept a self-signed cert through the TV middleware).

Associated revisions

Revision a67fef5f (diff)
Added by Waqar Ahmed over 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision 4932e2bc (diff)
Added by Waqar Ahmed over 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision f23dde74 (diff)
Added by Waqar Ahmed about 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision ef055013 (diff)
Added by Waqar Ahmed about 1 year ago

Version upgrade for Multidict This commit updates the version of py-multidict port to bump it according to aiohttp-wsgi requirements. Ticket: #38405

Revision d63ad682 (diff)
Added by Waqar Ahmed about 1 year ago

Version upgrade for Multidict This commit updates the version of py-multidict port to bump it according to aiohttp-wsgi requirements. Ticket: #38405

Revision fe49e837 (diff)
Added by Waqar Ahmed about 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision 656c026b (diff)
Added by Waqar Ahmed about 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision a9e2b5f6 (diff)
Added by Waqar Ahmed about 1 year ago

SSL configured for Middlewared natively This commit ensures that middlewared is exposed over SSL. Ticket: #38405

Revision ef1b527d (diff)
Added by Waqar Ahmed about 1 year ago

tkt-38405: Default protocol for Freenas set to HTTP+HTTPS (#1648) SSL configured for Middlewared natively This commit ensures that SSL is running on FreeNAS at all times and moves nginx configuration generation to Middlewared Ticket: #38405

History

#1 Updated by Dru Lavigne over 1 year ago

  • Assignee changed from Release Council to William Grzybowski

#2 Updated by William Grzybowski over 1 year ago

  • Status changed from Unscreened to Screened
  • Target version changed from Backlog to 11.3
  • Severity changed from New to Medium

#3 Updated by William Grzybowski over 1 year ago

  • Status changed from Screened to Unscreened
  • Assignee changed from William Grzybowski to Waqar Ahmed

Waqar, we need SSL directly in middlewared, this needs some research on aiohttp.

We should generate a self signed certificate if there isn't one. Where to store it is the question, I am thinking we can use /data.

#4 Updated by Waqar Ahmed over 1 year ago

  • Status changed from Unscreened to In Progress

#5 Updated by Dru Lavigne over 1 year ago

#7 Updated by Bug Clerk about 1 year ago

  • Status changed from In Progress to Ready for Testing

#8 Updated by Dru Lavigne about 1 year ago

  • Subject changed from Secure Websocket access to middleware to Add secure websocket access to middleware
  • Needs Merging changed from Yes to No

#9 Updated by Dru Lavigne 10 months ago

  • Target version changed from 11.3 to 11.3-BETA1

#10 Updated by Ken Moore 9 months ago

I was able to use an online websocket test tool (http://www.websocket.org/echo.html) to point to a FreeNAS 11-nightly VM and successfully connect to the wss://[IP]/websocket URL.

#11 Updated by Dru Lavigne 9 months ago

  • Status changed from Ready for Testing to Done
  • Needs QA changed from Yes to No
  • Needs Doc changed from Yes to No

#12 Updated by Dru Lavigne 8 months ago

  • Target version changed from 11.3-BETA1 to 11.3-ALPHA1

Also available in: Atom PDF