Project

General

Profile

Feature #3700

Add SSL support to buildin HTTP server

Added by Guillaume DC over 3 years ago. Updated 3 months ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Infrastructure
Target version:
Start date:
2016-04-07
Due date:
% Done:

0%

Estimated time:

Description

server name

SSL support:
- protocol until TLSv1.2
- administrator add his own server.key
- administrator add his own server.crt
- administrator add his own dhparam.pem
- HSTS
- ciphers list

Why not enable auth digest (htpasswd, htaccess)

I think it's important to securise our tvh web server. So why not use a real SSL support.

History

#1

Updated by Jaroslav Kysela over 3 years ago

  • Subject changed from Enhanced web server to Add SSL support to buildin HTTP server
  • Target version set to 999
#2

Updated by Jaroslav Kysela over 3 years ago

I added digest support to v4.1-1847-ge15d7fd .

The SSL support integration has low priority - you may use any proxy server like nginx to encrypt properly your external connection.

#3

Updated by Guillaume DC over 3 years ago

Jaroslav Kysela wrote:

I added digest support to v4.1-1847-ge15d7fd .

The SSL support integration has low priority - you may use any proxy server like nginx to encrypt properly your external connection.

:

#4

Updated by Guillaume DC over 3 years ago

Yes, but I tried this and it does not work properly through proxy SSL nginx vhost ==> proxy pass to tvh web server

#5

Updated by Jaroslav Kysela over 3 years ago

Nginx works (some users really using it), but you must configure it properly. For tvh you should use --http_root option to properly map paths, if you map tvh to a www path.

#6

Updated by Guillaume DC over 3 years ago

I made a topic for that but I had no answer.
https://tvheadend.org/boards/4/topics/20555

#7

Updated by Guillaume DC over 3 years ago

Thank you for your answer :)

#8

Updated by Anti S 3 months ago

I have used stunnel under Debian Linux for more than a two years now, works like a charm.

Also available in: Atom PDF