On Sun, Oct 14, 2001 at 08:06:52PM +0200, Daniel ?borg wrote: > * On 14 Oct 2001 19:07 CEST, Ian Clarke <ian at hawk.freenetproject.org> > wrote: > > There is an XML-RPC implementation for talking to the node in 0.3, > > however for one reason or another people didn't use it much, and it > > hasn't been ported to 0.4 yet. Either way, FCP is the standard way for > > a client to talk to the node, so please stick to that. > > Seems a bit dangerous to me to expose node control to anyone on the > Internet if they can crack your node's password.
As GJ noted, the FCP interface should only bind to the loopback by default, but there is also the option of requiring an authenticated connection to accept admin commands. FCP connections can be done with the same encryption as is on normal FNP connection, that has both strong authentication and encryption, and there is an option to set the accepted public key for the peer. If you want to write shutdown messages and alike, you will want to subclass Freenet.message.client.AdminMessage for the messages, which already contains a protected method isAuthorized() which you can use. Look at Freenet.message.client.GetDiagnostics for an example of an admin message. > > /D > > -- > Daniel ?borg <tjost at ctrl-c.liu.se> > > > _______________________________________________ > Devl mailing list > Devl at freenetproject.org > http://lists.freenetproject.org/mailman/listinfo/devl -- Though here at journey's end I lie In darkness buried deep, above all shadows rides the Sun beyond all towers strong and high, and the Stars forever dwell: beyond all mountains steep, I will not say the Day is done, nor bid the Stars farewell. (JRRT) Oskar Sandberg oskar at freenetproject.org _______________________________________________ Devl mailing list Devl at freenetproject.org http://lists.freenetproject.org/mailman/listinfo/devl
