I found where in the code things go awry - http.py:339:

        environ = self.cgi_environment()

        if (environ.get('HTTPS') in ('on', 'ON') or

            environ.get('SERVER_PORT_SECURE') == "1"):

            # XXX this will currently never be true

            protocol = 'https'

        else:

            protocol = 'http'

Notice the comment - ugh.  Inserting the following line into the
cgi_environment() method (http.py:322) enables secure reverse proxying for
me:

        env['HTTPS'] = env.get('HTTP_REFERER','').startswith('https') and
'ON'

I suspect there's a more correct way.

- Rob


On Mon, Nov 22, 2010 at 5:47 PM, Rob Guttman <[email protected]> wrote:

> Would like to protect the supervisord webui with SSL and auth.  Does anyone
> have a good recipe for this - preferably using apache2?
>
> Thanks.
> - Rob
>
>
_______________________________________________
Supervisor-users mailing list
[email protected]
http://lists.supervisord.org/mailman/listinfo/supervisor-users

Reply via email to