Feature #3700

Add SSL support to buildin HTTP server

Added by Guillaume DC 12 months ago. Updated 12 months ago.

Status:NewStart date:2016-04-07
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Infrastructure
Target version:4.6

Description

server name

SSL support:
- protocol until TLSv1.2
- administrator add his own server.key
- administrator add his own server.crt
- administrator add his own dhparam.pem
- HSTS
- ciphers list

Why not enable auth digest (htpasswd, htaccess)

I think it's important to securise our tvh web server. So why not use a real SSL support.

History

#1 Updated by Jaroslav Kysela 12 months ago

  • Subject changed from Enhanced web server to Add SSL support to buildin HTTP server
  • Target version set to 4.6

#2 Updated by Jaroslav Kysela 12 months ago

I added digest support to v4.1-1847-ge15d7fd .

The SSL support integration has low priority - you may use any proxy server like nginx to encrypt properly your external connection.

#3 Updated by Guillaume DC 12 months ago

Jaroslav Kysela wrote:

I added digest support to v4.1-1847-ge15d7fd .

The SSL support integration has low priority - you may use any proxy server like nginx to encrypt properly your external connection.

:

#4 Updated by Guillaume DC 12 months ago

Yes, but I tried this and it does not work properly through proxy SSL nginx vhost ==> proxy pass to tvh web server

#5 Updated by Jaroslav Kysela 12 months ago

Nginx works (some users really using it), but you must configure it properly. For tvh you should use --http_root option to properly map paths, if you map tvh to a www path.

#6 Updated by Guillaume DC 12 months ago

I made a topic for that but I had no answer.
https://tvheadend.org/boards/4/topics/20555

#7 Updated by Guillaume DC 12 months ago

Thank you for your answer :)

Also available in: Atom PDF