1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/integration/system
Sebastiaan van Stijn 547b993e07
Add warning if REST API is accessible through an insecure connection
The remote API allows full privilege escalation and is equivalent to
having root access on the host. Because of this, the API should never
be accessible through an insecure connection (TCP without TLS, or TCP
without TLS  verification).

Although a warning is already logged on startup if the daemon uses an
insecure configuration, this warning is not very visible (unless someone
decides to read the logs).

This patch attempts to make insecure configuration more visible by sending
back warnings through the API (which will be printed when using `docker info`).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-08-21 22:03:24 +02:00
..
cgroupdriver_systemd_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00
event_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00
info_linux_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00
info_test.go Add warning if REST API is accessible through an insecure connection 2018-08-21 22:03:24 +02:00
login_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00
main_test.go Add canonical import comment 2018-02-05 16:51:57 -05:00
version_test.go Update tests to use gotest.tools 👼 2018-06-13 09:04:30 +02:00