[ckan-changes] [okfn/ckan] ae3cdb: [#1422] More secure default for the repoze secret ...

Mon Jan 20 16:15:11 UTC 2014

  Branch: refs/heads/release-v2.2
  Home:   https://github.com/okfn/ckan
  Commit: ae3cdb78515397420c13f7fb03a8ab3a4826f901
      https://github.com/okfn/ckan/commit/ae3cdb78515397420c13f7fb03a8ab3a4826f901
  Author: amercader <amercadero at gmail.com>
  Date:   2014-01-20 (Mon, 20 Jan 2014)

  Changed paths:
    M ckan/config/middleware.py
    M ckan/config/who.ini

  Log Message:
  -----------
  [#1422] More secure default for the repoze secret key

The who.ini file has a secret key used during authentication. To make sure
users don't forget to update it we can use the beaker session secret which
is generated randomly when creating the ckan ini file.

If users define a secret in the who.ini file, this one will be used.

To do this, we use a small custom plugin that checks the secret key and
calls the core repoze plugin afterwards.

  Commit: 12a4272980079cfeec5f3b9e234a030f3f906fbe
      https://github.com/okfn/ckan/commit/12a4272980079cfeec5f3b9e234a030f3f906fbe
  Author: Nigel Babu <nigel.babu at okfn.org>
  Date:   2014-01-20 (Mon, 20 Jan 2014)

  Changed paths:
    M doc/install-from-package.rst

  Log Message:
  -----------
  [#1437] Instruction to restart apache and nginx

  Commit: 9daf48422311571c5c615ef8f996b6510e071c3e
      https://github.com/okfn/ckan/commit/9daf48422311571c5c615ef8f996b6510e071c3e
  Author: Nigel Babu <nigel.babu at okfn.org>
  Date:   2014-01-20 (Mon, 20 Jan 2014)

  Changed paths:
    M doc/upgrade-package-to-minor-release.rst
    M doc/upgrade-package-to-patch-release.rst

  Log Message:
  -----------
  Add restart instructions in upgrade docs too

Compare: https://github.com/okfn/ckan/compare/cec05510e1d2...9daf48422311