Comments (3)
As someone coming back to FBMuck after many years absence, my thought is the 'alternative port' solution is likely the best IMHO.
Make direct changes to the SSL tuning only apply to the alternate port, with a separate command just for applying the 'alternative port' settings to the 'live port' ones instead, with no direct way to apply changes to the live port.
That would keep the code from exploding in complexity, current workflow would work with one additional '@apply_ssl' command or whatever is decided on. And for graceful failure if the alternative port allocation fails the only thing it would break is the @reconfigure_ssl command, so the MUCK as a whole will still load and can give 'in-game' errors to the wizards that try to use the command so they can get things fixed.
from fuzzball.
Could wizards actually be locked out because of this?
ssh account@muckserver
nc localhost nontlsporthere
(or use telnet instead of nc if so desired)
from fuzzball.
@wyld-sw asked me to weigh in.
My 2 cents are, this sounds like a lot of work for an edge-case sort of thing. If we do anything, we should validate the SSL configuration better at @ tune time or at @ reconfigure_ssl time if necessary. If you lock yourself out of the MUCK... the worst case is you send a TERM signal to shut it down clean, and start it back up again on a not-secure port, fix it, put it back.
If it's not this way already, the SSL settings should only be changeable by One to avoid people without shell access from mussing up the joint. It may already be this way (didn't check).
from fuzzball.
Related Issues (20)
- READ from MUF called on Welcome Screen causes oddities HOT 1
- {force} allows escape character in input HOT 2
- Use XML to store helpfile content
- Make users always have a new dbref HOT 4
- Improve READ handling on Welcome Screen
- Appveyor build failing with Conan 2.0 HOT 1
- Wizards can GUEST themselves, but can't un-GUEST themselves HOT 3
- It Might Be Possible to Stack Overflow in propqueue(...) in timequeue.c HOT 1
- Idea: categorize messages (including in-server) with prefix coding HOT 3
- Propqueue Documentation Improvement HOT 2
- Oddities and server crash while MUF debugging
- DESCRDBREF is not a direct replacement for CONDBREF HOT 10
- RIDE program on starterdb not properly configured HOT 2
- Page needs 'W' bit HOT 1
- Improve abort_interp macro to avoid usage of globals HOT 4
- Idea: exit and program restrictions HOT 5
- Add flag? MPI Function HOT 2
- @restart within docker doesn't bring the MUCK back up
- Look into hanging unit tests
- New password hashing algorhithm causes crash on login HOT 21
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fuzzball.