8000 handle non-HTTPS arkime case · Issue #629 · cisagov/Malcolm · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

handle non-HTTPS arkime case #629

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
mmguero opened this issue Mar 25, 2025 · 0 comments
8000
Closed

handle non-HTTPS arkime case #629

mmguero opened this issue Mar 25, 2025 · 0 comments
Assignees
@mmguero
Labels
arkime Relating to Malcolm's use of Arkime enhancement New feature or request security Related to issues with bearing on the security of Malcolm itself
Milestone
v25.04.0

Comments

@mmguero
Copy link
Collaborator
mmguero commented Mar 25, 2025

Even when NGINX_SSL is true in nginx.env, we are still basically hard-coding the requirement for Arkime to use SSL. Primarily this is because you can't mix-and-match non-SSL with SSL, so if you have a hedgehog for which you want SSL, but Malcolm internally doesn't want SSL for its local Arkime instance, that doesn't work.

However, there are some instances where a user really might want to not do SSL for arkime (ie., they're doing TLS termination in some other way). We should handle that case.

This will affect:

  • container health checks
  • kubernetes manifests
  • API readiness check
  • hedgehog
@mmguero mmguero added arkime Relating to Malcolm's use of Arkime enhancement New feature or request labels Mar 25, 2025
@mmguero mmguero added this to the v25.04.0 milestone Mar 25, 2025
@mmguero mmguero added this to Malcolm Mar 25, 2025
@mmguero mmguero moved this to Todo (develop) in Malcolm Mar 25, 2025
@mmguero mmguero added the security Related to issues with bearing on the security of Malcolm itself label Mar 26, 2025
@mmguero mmguero self-assigned this Apr 10, 2025
@mmguero mmguero moved this from Todo (develop) to In Progress in Malcolm Apr 10, 2025
mmguero added a commit to mmguero-dev/Malcolm that referenced this issue Apr 10, 2025
@mmguero
cisagov#629, allow non-SSL arkime via ARKIME_SSL=true|false environme…
24b2a6e 
…nt variable in arkime.env
7A1B @mmguero mmguero closed this as completed Apr 10, 2025
@github-project-automation github-project-automation bot moved this from In Progress to Done in Malcolm Apr 10, 2025
This was referenced Apr 28, 2025
Merged
Merged
@mmguero mmguero moved this from Done to Released in Malcolm Apr 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mmguero mmguero

Labels
arkime Relating to Malcolm's use of Arkime enhancement New feature or request security Related to issues with bearing on the security of Malcolm itself
Projects
Malcolm
Status: Released
Milestone
v25.04.0
Development

No branches or pull requests
1 participant
@mmguero
0