cockpit-project.github.io
cockpit-project.github.io copied to clipboard
Incorrect information on "SSL/TLS Usage" page?
I'm reading the documentation for SSL/TLS Usage, the page says that if an HTTP connection comes from 127.0.0.0/8
, Cockpit will allow the communication to go through without HTTPS. But when I tested this on my server by making a curl
HEAD
request to 127.0.0.2:9090
, Cockpit will still redirect the request to HTTPS. So the documentation for SSL/TLS Usage can be updated to say that requests from 127.0.0.1
will be allowed without HTTPS instead.