TeamCity exposes unsecured XML-RPC entry points, Can someone please guide how to make them secure.
Got an answer from Teamcity support team.
"As XML-RPC uses the HTTP protocol so the easiest option would be to set up TeamCity to use SSL. You can find the documentation for the procedure here:
https://confluence.jetbrains.com/display/TCD10/Using+HTTPS+to+access+TeamCity+server"
Hope it will be helpful for some one.
Related
Would like to understand what is the difference between WAF and APIM (Like APIGEE or AZURE APIM).
What are capabilities of WAF and which needs to be choose to protect the backend web application.
Thank you in advance.
Aaditya
WAF protects your backend web server by stopping every request that having malicious values. Malicious requests can be SQL injection, Cross site scripting.
Modern WAF also protects server from blacklisted IPS (tor or bots).
You can also define rules like whitelist IP or regex match for parameters and header.
Regards,
Jaikey sarraf
Google Apigee plateform also has capabilities like whitelisting, security(OAuth, JWT, Basic and key based), CORS header and others.
I think that you should more focus on what kind of architecture you might need in order to support future requirement. As with Apigee, Google has great support for cloud as well(AWS, GCP and Azure) with support to almost all type of language and virtual target backend for complex mesh ups as well.
Apigee provides inbuild support for Analytics and Monetization services as well, which you might want to consider.
Apigee has 24X7 support for all your issue/concern for different level of environments.
My CouchDB configuration for CORS is failing for https calls, but the same is working for http.
My cors config on CouchDB is as follows,
Please check your certificates with another server.
I personally had a problem with CouchDB and self sign certificates, if possible try with real one :)
You can try the certificates on another server first, and if it fails there as well, try with other certificates. If not ... more debug :)
Also please have in mind CORS support in browsers - http://caniuse.com/#feat=cors
Since most of them do support it, but nothing is said about https support of cors.
You can share more info of course as well, to have the whole picture :)
Good luck
I tried looking for any article mentioning HTTPS but I only get the generic HTTP binding material, no mention of HTTP Secure.
I haven't found much specific tutorial material. The general approach is alluded to here in the InfoCenter The fundamental point being that the ESB is giving access to Web Services and the HTTPS or SSL connectivity is defined largely in the Web Service itself.
It seems like is you search for SSL you get more extensive results, for example here
Another option is to use a web server (with SSL) in front of WAS.
Could anyone please guide in regards with the pool proxy development process. As the provided documentation (Proxy and Protocol guide) explains only about proxy classes but needing few more help and the directions to develop the pool proxy. Is there any roadmap as how to develop our own proxies for the driver or simply the scenario.
Please guide with above query, any help would be greatly appreciated.
You need to be a Control4 Developer to gain access to their SDK which includes a Pool Template.
When using pjsip technology to develop a server, the official web site is a bit difficult to use when looking for a way to develop a server.
It has an introduction on how to develop a client application with the library, but not how to implement a server.
Any one direct me to some reference documentation or blob posts or other web site that can help show me how to create a pjsip based server?
You can find a sample SIP proxy implementation inside the PJSIP source code: http://trac.pjsip.org/repos/browser/pjproject/trunk/pjsip-apps/src/samples/stateful_proxy.c and http://trac.pjsip.org/repos/browser/pjproject/trunk/pjsip-apps/src/samples/stateless_proxy.c
Asterisk SCF module uses pjsip. Maybe that will shed some light
More information, visit
https://wiki.asterisk.org/wiki/display/TOP/How+to+add+a+PJSIP+module+to+Asterisk+SCF
https://wiki.asterisk.org/wiki/display/AST/SIP+Stack+Research
I think I found it. PJSUA utility in pjproject tree acts as SIP server, Zoiper Softphone successfully connects and makes calls.