Project

General

Profile

Actions

Bug #7018

open

SPICE libvirt websockets connections aren't encrypted

Added by Dominic Cleal over 9 years ago. Updated almost 6 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Compute resources - libvirt
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

When setting up a libvirt VM, the websockets connection isn't encrypted when the websockets_ssl* settings are appropriately configured, but VNC ones are.


Related issues 3 (1 open2 closed)

Related to Foreman - Feature #3601: Use secure websockets for console accessClosedDaniel Lobato Garcia11/07/2013Actions
Related to Foreman - Feature #7805: Add several security related HTTP headers - security hardening.ClosedJan Rusnacko10/03/2014Actions
Related to Foreman - Feature #2569: [RFE] Add ability to encrypt HTML5 spice clientNewActions
Actions #1

Updated by Dominic Cleal over 9 years ago

  • Related to Feature #3601: Use secure websockets for console access added
Actions #2

Updated by Dominic Cleal over 9 years ago

  • Category changed from Compute resources to Compute resources - libvirt
Actions #3

Updated by Dominic Cleal over 9 years ago

  • Related to Feature #7805: Add several security related HTTP headers - security hardening. added
Actions #4

Updated by Dominic Cleal over 9 years ago

This is causing a problem now with Chrome since #7805, as it's not permitting mixed content by default.

https://github.com/theforeman/foreman/pull/1882#issuecomment-61255793

To workaround, click the shield in the address bar, then "Load unsafe script".

Actions #5

Updated by Anonymous over 7 years ago

  • Related to Feature #2569: [RFE] Add ability to encrypt HTML5 spice client added
Actions #6

Updated by Oliver Freyermuth almost 6 years ago

  • Triaged set to No

Seems that for Firefox, network.websocket.allowInsecureFromHTTPS is needed in about:config.
Things still fail for me then, but also VNC failed - still investigating.

Actions

Also available in: Atom PDF