Quarry should be HTTPS-only
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Legoktm
	Jul 31 2015, 9:25 PM

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	quarry: Enforce https only at nginx level	operations/puppet	production	+5 -3
	quarry: Make Quarry HTTPS only	operations/puppet	production	+3 -0

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		yuvipanda	T107627 Quarry should be HTTPS-only
		Resolved		bd808	T120486 Set "https_upgrade" configuration flag for domainproxy to enforce HTTPS upgrade for GET\|HEAD requests

Event Timeline

Legoktm created this task.Jul 31 2015, 9:25 PM

Legoktm raised the priority of this task from to Needs Triage.

Legoktm updated the task description. (Show Details)

Legoktm added projects: Quarry, HTTPS.

Legoktm added subscribers: Legoktm, yuvipanda.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 31 2015, 9:25 PM

In the meantime... https://github.com/EFForg/https-everywhere/pull/2353

Ricordisamoa subscribed.Sep 30 2015, 2:13 AM

Dzahn added a project: Cloud-VPS.Dec 3 2015, 6:58 PM

Dzahn set Security to None.

Restricted Application added a project: Cloud-Services. · View Herald TranscriptDec 3 2015, 6:58 PM

Restricted Application added a subscriber: StudiesWorld. · View Herald Transcript

looks like https works just fine and only a redirect is missing from http->https, will look into it

Dzahn claimed this task.Dec 3 2015, 6:59 PM

Dzahn moved this task from Backlog to Services to fix on the HTTPS board.Dec 3 2015, 7:22 PM

it's behind dynamicproxy (module dynamicproxy) and that does not have an option for https-only yet. we need to add that in general in dynamicproxy for all projects using that

Dzahn removed Dzahn as the assignee of this task.Dec 5 2015, 12:36 AM

Dzahn mentioned this in T120486: Set "https_upgrade" configuration flag for domainproxy to enforce HTTPS upgrade for GET|HEAD requests.

Dzahn added a subtask: T120486: Set "https_upgrade" configuration flag for domainproxy to enforce HTTPS upgrade for GET|HEAD requests.

• chasemp triaged this task as Medium priority.Dec 7 2015, 8:34 PM

Aklapper added a project: Traffic.Feb 23 2016, 6:12 PM

Restricted Application added a project: SRE. · View Herald TranscriptFeb 23 2016, 6:12 PM

Change 285057 had a related patch set uploaded (by Yuvipanda):
quarry: Make Quarry HTTPS only

https://gerrit.wikimedia.org/r/285057

Change 285057 merged by Yuvipanda:
quarry: Make Quarry HTTPS only

https://gerrit.wikimedia.org/r/285057

Change 285058 had a related patch set uploaded (by Yuvipanda):
quarry: Enforce https only at nginx level

https://gerrit.wikimedia.org/r/285058