Opened 8 years ago

Closed 6 years ago

Last modified 6 years ago

#3919 closed defect (fixed)

wiki login needs to be put under SSL

Reported by: skyper Owned by: Grant Slater
Priority: blocker Milestone:
Component: wiki Version:
Keywords: login ssl Cc:

Description

As the summary says, TomH pointed at this at:[ticket/#3914]

Change History (8)

comment:1 Changed 8 years ago by Grant Slater

Resolution: fixed
Status: newclosed

comment:2 Changed 6 years ago by skyper

Resolution: fixed
Status: closedreopened

It is back again. Even when using https all the way.

comment:3 Changed 6 years ago by federicoleva@…

Should only be a matter of https://www.mediawiki.org/wiki/Manual:$wgSecureLogin to true now.

https://bugzilla.wikimedia.org/show_bug.cgi?id=40541 and https://bugzilla.wikimedia.org/show_bug.cgi?id=42832 were fixed, so after login you can send users back to HTTP and avoid melting servers.

comment:5 Changed 6 years ago by skyper

Common guys, please.

If this is a bug in the wiki software we need a workaround in the web server configuration. As right no ssl encryption is available it should be not to hard to set the login under ssl and redirect after.

Thanks

comment:6 Changed 6 years ago by Grant Slater

Fixed. Now running on hardware with enough power.

comment:7 Changed 6 years ago by Grant Slater

Resolution: fixed
Status: reopenedclosed

comment:8 Changed 6 years ago by federicoleva@…

Nice! And the checkbox works, reported upstream https://bugzilla.wikimedia.org/show_bug.cgi?id=40541#c22 Note that it will be removed in 1.22, see docs at https://www.mediawiki.org/wiki/Manual:$wgSecureLogin

Note: See TracTickets for help on using tickets.