Page MenuHomePhabricator

Use SSL for Etherpad Lite instance
Closed, ResolvedPublic

Description

Info:

The develop branch (since 2012-11-24 https://github.com/ether/etherpad-lite/commit/fdf0b1a3844b2441852e472781a7bf41f8775b18 ) of Etherpad lite has been enabled to support (optionally, currently not by default) SSL i.e. to run EPL via https:// on native node.

The only required change:

  • set up the ssl section in settings.json and let it point to a suited server.key and server.crt on your server

Version: unspecified
Severity: enhancement

Details

Reference
bz43404

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 1:06 AM
bzimport set Reference to bz43404.
bzimport added a subscriber: Unknown Object (MLST).

This is all well and good, but since this is a labs instance, I hesitate to try deploying an SSL solution to it.

Let's see if we can't get EPL deployed to production, then we can actually do this right....especially since we'll be putting it behind a reverse proxy, I doubt we would have any trouble with SSL in any case.

Moving this to Wikimedia (I *think* there's an Etherpad component), and I'll add a few dependencies to this bug that are blocking it.

Yes, EPL should replace etherpad in production.

[update]

Native HTTPS support (No need for https on the reverse proxy) is now available in EPL branch master release 1.2.2 (since 2012-12-27)

See http://blog.etherpad.org/2012/12/27/etherelves-wish-you-a-merry-xmas-and-an-api-new-year-version-1-2-2-release/

(In reply to comment #4)

https://epl.wikimedia.org/p/test%20https

EPL/SSL works fine for me (Firefox 23.0 on Windows XP)
Please publish server key fingerprint (md5, sha1) somewhere on MediaWiki, thanks / Wikinaut 09.08.2013 14:56 local time (20130809125617 UTC) so that users can check.

(In reply to comment #5)

(In reply to comment #4)

https://epl.wikimedia.org/p/test%20https

EPL/SSL works fine for me (Firefox 23.0 on Windows XP)
Please publish server key fingerprint (md5, sha1) somewhere on MediaWiki,
thanks / Wikinaut 09.08.2013 14:56 local time (20130809125617 UTC) so that
users can check.

see my simply PHP scriptlet https://github.com/Wikinaut/MySimpleCertViewer for viewing cert data

Hi, this SSL Etherpad works, so I think, this bug can be closed. As reporter of this bug I am closing it now,

"Use SSL for the etherpad lite instance on Labs" did not get fixed.
However epl.wikimedia.org is a sufficient solution.
Rephrasing summary.