Project

Profile

Help

Story #165

closed

RFE: Time based hashed package download URLs

Added by jsherril@redhat.com about 7 years ago. Updated about 3 years ago.

Status:
CLOSED - WONTFIX
Priority:
Low
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

++ This bug was initially created as a clone of Bugzilla Bug #798417 ++

Description of problem:

Description of problem:

In satellite there was a way to generate hashed urls for package downloads that would time out after some time (4 hours i believe).

Currently there is no easy way to download packages from protected urls, and this would be useful.

Actions #1

Updated by jcline@redhat.com almost 6 years ago

We now generate signed URLs with a timeout for lazy sync downloads, and we have a WSGI application to verify signatures. It should be possible to wire things up so that users can get URLs signed for n seconds/minutes/hours/days and that the main Pulp application accepts signed urls in place of client certificates.

Actions #2

Updated by bmbouter about 3 years ago

  • Status changed from NEW to CLOSED - WONTFIX
Actions #3

Updated by bmbouter about 3 years ago

Pulp 2 is approaching maintenance mode, and this Pulp 2 ticket is not being actively worked on. As such, it is being closed as WONTFIX. Pulp 2 is still accepting contributions though, so if you want to contribute a fix for this ticket, please reopen or comment on it. If you don't have permissions to reopen this ticket, or you want to discuss an issue, please reach out via the developer mailing list.

Actions #4

Updated by bmbouter about 3 years ago

  • Tags Pulp 2 added

Also available in: Atom PDF