heckyel/mediagoblin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add warning about crypt/itsdangeroussecret.bin.

Browse Source 
You should not leak that file, really.
This commit is contained in:
Elrond 2013-04-30 00:24:45 +02:00
parent 2e6ee596ad
commit b835e15319
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/source/pluginwriter/api.rst
View File

@ -31,4 +31,4 @@ Please check the release notes for updates!
.. automodule:: mediagoblin.tools.pluginapi .. automodule:: mediagoblin.tools.pluginapi
:members: get_config, register_routes, register_template_path, :members: get_config, register_routes, register_template_path,
register_template_hooks, get_hook_templates, register_template_hooks, get_hook_templates,
hook_handle, hook_runall, hook_transform, hook_handle, hook_runall, hook_transform

14
docs/source/siteadmin/deploying.rst
View File

@ -345,3 +345,17 @@ Visit the site you've set up in your browser by visiting
smaller deployments. However, for larger production deployments smaller deployments. However, for larger production deployments
with larger processing requirements, see the with larger processing requirements, see the
":doc:`production-deployments`" documentation. ":doc:`production-deployments`" documentation.
Security Considerations
~~~~~~~~~~~~~~~~~~~~~~~
.. warning::
The directory ``user_dev/crypto/`` contains some very
sensitive files.
Especially the ``itsdangeroussecret.bin`` is very important
for session security. Make sure not to leak its contents anywhere.
If the contents gets leaked nevertheless, delete your file
and restart the server, so that it creates a new secret key.
All previous sessions will be invalifated then.