[Rdo-list] security q: horizon and ssl

[Matthias Runge]

On 19/04/15 05:34, Mohammed Arafa wrote:
> hi all
>
> wondering when this security bug is slated to be resolved, its been open
> since november 2014
> *Bug 1161915* <https://bugzilla.redhat.com/show_bug.cgi?id=1161915>
> -horizon console uses http when horizon is set to use ssl
>
As far as I understand here, it's a local configuration issue on your side.

horizon console url is returned from nova, returning the nova-novnc url.

Please change in your /etc/nova/nova.conf
to something like

novncproxy_base_url=https://192.168.36.10:6080/vnc_auto.html


Matthias