continuum-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Maria Catherine Tan (JIRA)" <>
Subject [jira] Commented: (CONTINUUM-2044) Build agent should only accept requests from its master
Date Sun, 12 Jun 2011 23:09:42 GMT


Maria Catherine Tan commented on CONTINUUM-2044:

The key will be saved in the database and in configuration files that's why I thought of encrypting
it. But if it's unnecessary I could remove it.

> Build agent should only accept requests from its master
> -------------------------------------------------------
>                 Key: CONTINUUM-2044
>                 URL:
>             Project: Continuum
>          Issue Type: Improvement
>          Components: Distributed Builds
>    Affects Versions: 1.3.1 (Alpha)
>            Reporter: Wendy Smoak
>            Assignee: Maria Catherine Tan
>             Fix For: 1.4.1 (Beta)
> In the current implementation, a build agent will accept a request from anyone who knows
the url, although it will only send responses to the master url in its config file.
> The agent should only accept requests from its master, and should send an error response
to any other requests.
> On the dev list, Christian suggested using a shared secret as the simplest way for the
agent to be sure the master making the request is who it says it is.  See:
> Related to CONTINUUM-2041 (Master should be able to detect an incorrect master url in
a build agent's config file)

This message is automatically generated by JIRA.
For more information on JIRA, see:


View raw message