[Python-Dev] [Buildbot-devel] Re: buildbot
exarkun at divmod.com
Thu Jan 12 06:35:11 CET 2006
On Tue, 10 Jan 2006 09:18:59 -0800, Stephen Davis <stephendavis at mac.com> wrote:
>> The reason I want static pages is for security concerns. It is not
>> easy whether buildbot can be trusted to have no security flaws,
>> which might allow people to start new processes on the master,
>> or (perhaps worse) on any of the slaves.
>I have security concerns as well, but not in buildbot itself. My
>project is restricted even withinz the company I work for so I need
>the buildbot web server to only be available to certain people.
>HTTPS access would be nice too. TwistedWeb doesn't seem to have
>support for either HTTPS or authentication so I've been forced to
>"hide" it by putting it on a non-standard port. Very weak.
Inexcusably weak. Fortunately not exactly accurate, though: Twisted's web server supports both HTTPS and authentication. I won't bore the list with the details, but you can read more here: <http://twistedmatrix.com/documents/current/api/twisted.internet.interfaces.IReactorSSL.html> and <http://twistedmatrix.com/projects/web/documentation/examples/simpleguardex2.py>
More information about the Python-Dev