[tor-bugs] #24144 [Internal Services/Service - trac]: Cannot login or submit forms Trac onion site ('must use HTTPS to submit forms')

[Tor Bug Tracker & Wiki]

#24144: Cannot login or submit forms Trac onion site ('must use HTTPS to submit
forms')
----------------------------------------------+---------------------
 Reporter:  nido                              |          Owner:  qbi
     Type:  defect                            |         Status:  new
 Priority:  Medium                            |      Milestone:
Component:  Internal Services/Service - trac  |        Version:
 Severity:  Normal                            |     Resolution:
 Keywords:                                    |  Actual Points:
Parent ID:                                    |         Points:
 Reviewer:                                    |        Sponsor:
----------------------------------------------+---------------------

Comment (by arma):

 Yes, this is expected, and not straightforward to fix.

 Trac isn't written to be able to think of itself as multiple server names.

 Also, it defends itself from having you use it over plain http, and it
 doesn't know about onion services so it doesn't know to maybe treat them
 differently.

 The ultimate answer is probably to get an https cert for trac's onion
 service (which will be more straightforward once onion services are
 permitted to get DV https certs), and also to rewrite trac as needed so it
 can handle being multiple server names.

 In the mean time, it's probably simplest to close this ticket as a
 "wontfix", in that we would welcome a trac rewrite but I can't imagine
 anybody is actually going to do it.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24144#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online