Sick-Beard icon indicating copy to clipboard operation
Sick-Beard copied to clipboard

Add ability to specify HTTPS Chain file

Open realslacker opened this issue 11 years ago • 6 comments

Fixes bug with certificates not including certificate chain.

Adds a configuration option for HTTPS Chain file, and provides the file to CherryPy in option "server.ssl_certificate_chain".

Link to associated bug report: https://code.google.com/p/sickbeard/issues/detail?id=2546

realslacker avatar Dec 14 '14 22:12 realslacker

Anything new with this feature?

btesoroni avatar Feb 02 '16 02:02 btesoroni

Nothing new except the ability to use a SSL chain file, allowing SickBeard to use a cheap SSL cert... I'm not sure what you're asking?

realslacker avatar Feb 02 '16 02:02 realslacker

allowing to use a chain ssl cert

On Mon, Feb 1, 2016 at 9:43 PM, Shannon Brooks [email protected] wrote:

Nothing new except the ability to use a SSL chain file, allowing SickBeard to use a cheap SSL cert... I'm not sure what you're asking?

— Reply to this email directly or view it on GitHub https://github.com/midgetspy/Sick-Beard/pull/907#issuecomment-178325598.

btesoroni avatar Feb 02 '16 02:02 btesoroni

Ultimately, it is probably easier to put sb behind a reverse proxy. That way the web server does all the SSL heavy lifting (it also means you can separately configure it, keep it patched, ensure it is secure in relation to vulnerabilities) and passes the requests on to sb using plain http. Some quick googling and a little patience will see you through. :)

See here for an example with nginx (what I used), or with Apache.

githubsean avatar Feb 02 '16 07:02 githubsean

If you're going to leave the SSL implementation broken, why not just remove it completely? It's such an easy fix since CherryPy already supports the option for an SSL chain file.

Ultimately it doesn't matter to me, I've moved on to Sonarr.

realslacker avatar Feb 02 '16 15:02 realslacker

I moved to Sickrage.. it works there

On Tue, Feb 2, 2016 at 10:05 AM, Shannon Brooks [email protected] wrote:

If you're going to leave the SSL implementation broken, why not just remove it completely? It's such an easy fix since CherryPy already supports the option for an SSL chain file.

Ultimately it doesn't matter to me, I've moved on to Sonarr.

— Reply to this email directly or view it on GitHub https://github.com/midgetspy/Sick-Beard/pull/907#issuecomment-178621427.

btesoroni avatar Feb 02 '16 17:02 btesoroni