Project

General

Profile

Actions
Copy link

Bug #7627

closed

User story #7602: rudder-dev self upgrade

rudder-dev update uses http instead of https to update itself, which is a potential security hazard

Added by Nicolas CHARLES about 9 years ago. Updated about 8 years ago.

Status:
Released
Priority:
1 (highest)
Assignee:
Benoît PECCATTE
Category:
Rudder dev tools
Target version:
master
Pull Request:
https://github.com/Normation/rudder-t...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Using http to update a script itself is a serious security hazard, the update should use only https

Actions
Copy link
 #1

Updated by Nicolas CHARLES about 9 years ago

  • Status changed from New to In progress
Actions
Copy link
 #2

Updated by Jonathan CLARKE about 9 years ago

  • Assignee changed from Nicolas CHARLES to Jonathan CLARKE
Actions
Copy link
 #3

Updated by Jonathan CLARKE about 9 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Jonathan CLARKE to Benoît PECCATTE
  • Pull Request set to https://github.com/Normation/rudder-tools/pull/110
Actions
Copy link
 #4

Updated by Jonathan CLARKE about 9 years ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100
Actions
Copy link
 #6

Updated by Benoît PECCATTE about 8 years ago

  • Status changed from Pending release to Released
Actions
Copy link

Also available in: Atom PDF