Project

General

Profile

Bug #39005

mgr/dashboard: TCP port does not change when SSL is disabled

Added by Lenz Grimmer 3 months ago. Updated 3 months ago.

Status:
Won't Fix
Priority:
Normal
Assignee:
-
Category:
dashboard/general
Target version:
Start date:
03/28/2019
Due date:
% Done:

0%

Source:
Tags:
usability, security, ssl
Backport:
nautilus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

Florian raised a good point on IRC today:

<fghaas> So, it appears that if I do "ceph config set mgr mgr/dashboard/ssl false", then HTTPS is indeed disabled, but the service continues to listen on 8443, which strikes me as contradicting http://docs.ceph.com/docs/nautilus/mgr/dashboard/#host-name-and-port (which says 8443 for HTTPS, 8080 for HTTP).
<fghaas> To get the dashboard to listen on 8080, I also have to do "ceph config set mgr mgr/dashboard/server_port 8080".

When enabling/disabling SSL, it makes sense that the TCP port changes automatically accordingly, if the user did not explicitly choose a different one than the built-in defaults (8080/8443).


Related issues

Related to mgr - Feature #38331: mgr/dashboard: Add separate option to config SSL port Resolved 02/15/2019

History

#1 Updated by Volker Theile 3 months ago

This issue will be fixed with https://github.com/ceph/ceph/pull/26914 (which is tracked at #38331) when it is backported to Nautilus.

#2 Updated by Volker Theile 3 months ago

  • Related to Feature #38331: mgr/dashboard: Add separate option to config SSL port added

#3 Updated by Lenz Grimmer 3 months ago

Note that #38331 (which has already been merged into master) takes a different approach, by providing a separate config setting for the SSL port.

#4 Updated by Lenz Grimmer 3 months ago

  • Status changed from New to Won't Fix

Resolving this one as "Won't fix" - it'll be addressed by #38331 (and it's backport to nautilus)

Also available in: Atom PDF