Re: [PATCH] send-error-report: Use https instead of http protocol

[Richard Purdie <richard.purdie@linuxfoundation.org>]

On Mon, 2019-03-04 at 15:50 +0800, Robert Yang wrote:
> Hi Khem,
> 
> We have an internal error web server, this patch breaks it:
> 
> You're accessing the development server over HTTPS, but it only
> supports HTTP
> 
> So I tried to use runsslserver, but it doesn't work either since the
> host is
> Ubuntu 14.04 (python 2.7.6):
> 
> $ python manage.py runsslserver
> 
> [snip]
>      ssl_version=ssl.PROTOCOL_TLSv1_2,
> AttributeError: 'module' object has no attribute 'PROTOCOL_TLSv1_2'
> 
> This is because python is old.
> 
> I think that make it default to https would make the server harder to
> set up,
> so is it possible to:
> 
> * Make it default to http, and add an option such as --https (or --
> ssl) for https
> 
> Or:
> 
> * Add an option such as --no-ssl to make it use http.
> 
> I prefer the first one since https server is harder to setup than
> http in django. I can work on it if no objections.

At this point the project does require python3 so python2 being old
shouldn't be a reason to be changing this.

The project also needs to be seen to encourage secure practises so I
think https should be the default but adding an option to use http
should be ok.

Cheers,

Richard