Ticket #939: 939_crypto.diff

File 939_crypto.diff, 1.7 KB (added by Ben Sturmfels, 10 years ago)

Patch to move note about user_dev/crypto.

  • docs/source/siteadmin/deploying.rst 

    diff --git a/docs/source/siteadmin/deploying.rst b/docs/source/siteadmin/deploying.rst
index 741e965..d680c95 100644
    a b Apache  
    415415Instructions and scripts for running MediaGoblin on an Apache server
    416416can be found on the `MediaGoblin wiki <http://wiki.mediagoblin.org/Deployment>`_.
    417417
    418 
    419 Security Considerations
    420 ~~~~~~~~~~~~~~~~~~~~~~~
    421 
    422 .. warning::
    423 
    424    The directory ``user_dev/crypto/`` contains some very
    425    sensitive files.
    426    Especially the ``itsdangeroussecret.bin`` is very important
    427    for session security. Make sure not to leak its contents anywhere.
    428    If the contents gets leaked nevertheless, delete your file
    429    and restart the server, so that it creates a new secret key.
    430    All previous sessions will be invalidated.
    431 

  • docs/source/siteadmin/production-deployments.rst 

    diff --git a/docs/source/siteadmin/production-deployments.rst b/docs/source/siteadmin/production-deployments.rst
index 839d3ce..a332c65 100644
    a b To launch Celery separately from the MediaGoblin WSGI application:  
    9393
    9494.. _sentry:
    9595
     96Security Considerations
     97~~~~~~~~~~~~~~~~~~~~~~~
     98
     99.. warning::
     100
     101   The directory ``user_dev/crypto/`` contains some very
     102   sensitive files.
     103   Especially the ``itsdangeroussecret.bin`` is very important
     104   for session security. Make sure not to leak its contents anywhere.
     105   If the contents gets leaked nevertheless, delete your file
     106   and restart the server, so that it creates a new secret key.
     107   All previous sessions will be invalidated.
     108
    96109Set up sentry to monitor exceptions
    97110-----------------------------------
    98111