Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Force trac logins through HTTPS #1872

Closed
julienmoumne opened this issue Dec 5, 2010 · 2 comments
Closed

Force trac logins through HTTPS #1872

julienmoumne opened this issue Dec 5, 2010 · 2 comments
Labels
c: Website matomo.org For issues related to our matomo.org website. Task Indicates an issue is neither a feature nor a bug and it's purely a "technical" change.

Comments

@julienmoumne
Copy link
Member

http://dev.piwik.org/trac/login is accessible in plain HTTP, passwords are sent without encryption

mod_rewrite or mod_alias will do the trick

HTTPS access needs to be fixed aswell, right now it returns:

    Secure Connection Failed

    An error occurred during a connection to dev.piwik.org.

    SSL received a record that exceeded the maximum permissible length.

    (Error code: ssl_error_rx_record_too_long)
@mattab
Copy link
Member

mattab commented Oct 1, 2012

Now https://dev.piwik.org/trac/ works in SSL without warning (thanks Cyril!)

SSL login is not enabled / forced by default, but is usable if you use direct https access https://dev.piwik.org/trac/

@mattab
Copy link
Member

mattab commented Mar 11, 2013

Thx for suggestion. now the login form will redirect to HTTPS if http. Same for trac/admin requests.

@julienmoumne julienmoumne added this to the Community and Marketing milestone Jul 8, 2014
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
c: Website matomo.org For issues related to our matomo.org website. Task Indicates an issue is neither a feature nor a bug and it's purely a "technical" change.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@mattab @julienmoumne