[jira] Updated: (GERONIMO-911) Admin Console should require SSL

["Aaron Mulder (JIRA)" <de...@geronimo.apache.org>]

     [ http://issues.apache.org/jira/browse/GERONIMO-911?page=all ]

Aaron Mulder updated GERONIMO-911:
----------------------------------

    Fix Version: Wish List

The only problem I have with this is that our SSL cert is self-signed, so that would mean everyone who visits the console (at least for the first time) gets an error about an untrusted certificate.  That doesn't seem like a good first impression.  I don't think we should require SSL unless we have a default certificate that IE, Firefix, Safari, and Opera consider valid.

> Admin Console should require SSL
> --------------------------------
>
>          Key: GERONIMO-911
>          URL: http://issues.apache.org/jira/browse/GERONIMO-911
>      Project: Geronimo
>         Type: Bug
>   Components: console
>     Versions: 1.0-M5
>  Environment: all
>     Reporter: Donald Woods
>      Fix For: Wish List

>
> Admin Console login and Portlet access should require SSL to protect the system password and any connector/DB/LDAP configured passwords in the Portlets.
> I'm willing to create and post a patch for this, once I get a couple other items off my plate...  -Donald

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira