[Mailman-Developers] ssl for admin pages

matze matze at indymedia.org
Tue Jun 10 00:41:01 EDT 2003


hi,

in indymedia (http://indymedia.org) and sindominio
(http://sindomino.net) we saw the necessity to protect the admin part
of mailman (above all the password transmission) with a ssl
connection. i figured out that vanilla-mailman doesn't support this
feature
(http://www.mail-archive.com/mailman-users@python.org/msg16301.html)
so i dived into the mailman sources and figured out a possible
solution. it seems to me that the best way to achieve ssl connections
for the admin is putting a condition in ScriptURL() in Utils.py.

if((0 !=3D mm_cfg.DEFAULT_ADMIN_USE_SSL) and
   (target[0:5] =3D=3D 'admin')):
  web_page_url =3D replace(web_page_url, 'http:', 'https:')

as you see a new paramerter DEFAULT_ADMIN_USE_SSL has been added to
Default.py. i tested this on the lists of both projects and it's
working fine. as i'm sure that there are more ppl out there who would
like this feature i ask you whether you are interrested in adding it
to the mailman distribution. i uploaded a patch for mailman 2.1 on the
sourceforge site of mailman:
http://sourceforge.net/tracker/index.php?func=detail&aid=746728&group_id=103&atid=300103

/matze

-- 
   ( ( ( i ) ) )  http://barcelona.indymedia.org  ( ( ( i ) ) )

 *  using free software / Debian GNU/Linux | http://debian.org  *
				
gpg --keyserver keys.indymedia.org --recv-keys B9A88F6F

"La guerra es un acto abominable en el que se matan personas que no
 se conocen, dirigidas por personas que se conocen y no se matan"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.python.org/pipermail/mailman-developers/attachments/20030609/c570f4f7/attachment.bin


More information about the Mailman-Developers mailing list