[Python-Dev] [Buildbot-devel] Re: buildbot (original) (raw)

Jean-Paul Calderone exarkun at divmod.com
Thu Jan 12 06:35:11 CET 2006

On Tue, 10 Jan 2006 09🔞59 -0800, Stephen Davis <stephendavis at mac.com> wrote:

The reason I want static pages is for security concerns. It is not easy whether buildbot can be trusted to have no security flaws, which might allow people to start new processes on the master, or (perhaps worse) on any of the slaves. I have security concerns as well, but not in buildbot itself. My project is restricted even withinz the company I work for so I need the buildbot web server to only be available to certain people. HTTPS access would be nice too. TwistedWeb doesn't seem to have support for either HTTPS or authentication so I've been forced to "hide" it by putting it on a non-standard port. Very weak.

Inexcusably weak. Fortunately not exactly accurate, though: Twisted's web server supports both HTTPS and authentication. I won't bore the list with the details, but you can read more here: <http://twistedmatrix.com/documents/current/api/twisted.internet.interfaces.IReactorSSL.html> and <http://twistedmatrix.com/projects/web/documentation/examples/simpleguardex2.py>

Jean-Paul

More information about the Python-Dev mailing list