Commit 75361d87 by Sheng

Changed default policy to warning policy

parent 7bb9e362
...@@ -27,7 +27,7 @@ python main.py ...@@ -27,7 +27,7 @@ python main.py
python main.py --address='0.0.0.0' --port=8000 python main.py --address='0.0.0.0' --port=8000
# configure missing host key policy # configure missing host key policy
python main.py --policy=warning python main.py --policy=reject
# configure logging level # configure logging level
python main.py --logging=debug python main.py --logging=debug
...@@ -55,4 +55,4 @@ location / { ...@@ -55,4 +55,4 @@ location / {
### Tips ### Tips
* Try to use Nginx as a front web server (see config example above) and enable SSL, this will prevent your ssh credentials from being uncovered. Also afterwards the communication between your browser and the web server will be encrypted as they use secured websockets. * Try to use Nginx as a front web server (see config example above) and enable SSL, this will prevent your ssh credentials from being uncovered. Also afterwards the communication between your browser and the web server will be encrypted as they use secured websockets.
* Try to use reject policy as the missing host key policy, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found, the connection will be aborted. * Try to use reject policy as the missing host key policy along with your verified known_hosts, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found or the key is not matched, the connection will be aborted.
...@@ -18,7 +18,7 @@ from tornado.util import errno_from_exception ...@@ -18,7 +18,7 @@ from tornado.util import errno_from_exception
define('address', default='127.0.0.1', help='listen address') define('address', default='127.0.0.1', help='listen address')
define('port', default=8888, help='listen port', type=int) define('port', default=8888, help='listen port', type=int)
define('debug', default=False, help='debug mode', type=bool) define('debug', default=False, help='debug mode', type=bool)
define('policy', default='reject', define('policy', default='warning',
help='missing host key policy, reject|autoadd|warning') help='missing host key policy, reject|autoadd|warning')
define('period', default=10, help='seconds for periodic callback', type=int) define('period', default=10, help='seconds for periodic callback', type=int)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment