[tor-bugs] #19963 [Internal Services/Service - trac]: Cannot login to trac through the onion service

[Tor Bug Tracker & Wiki]

#19963: Cannot login to trac through the onion service
----------------------------------------------+---------------------
 Reporter:  cypherpunks                       |          Owner:  qbi
     Type:  defect                            |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Internal Services/Service - trac  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+---------------------
Changes (by qbi):

 * cc: weasel (added)


Comment:

 It seems trac requires cookies with the Secure flag. The Onion Service is
 only served over HTTP, so one can't log in or can't use trac where cookies
 are needed. AFAIK it is not so easy to get a certificate for the onion
 address. So what could be a good way to proceed?

  1. Get a certificate?
  1. Remove this onion service?
  1. Put a warning on the trac homepage?
  1. …?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19963#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online