[ckan-dev] Possible to Run paster serve Under SSL?

Tue Oct 10 16:54:33 UTC 2017

Good Day,

We tried adding ssl_perm=* to our .ini file and we received the following
exception when running paster serve <.ini_file_location> start:

Traceback (most recent call last):
  File "/usr/lib/ckan/default/bin/paster", line 11, in <module>
    sys.exit(run())
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/script/command.py",
line 102, in run
    invoke(command, command_name, options, args[1:])
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/script/command.py",
line 141, in invoke
    exit_code = runner.run(args)
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/script/command.py",
line 236, in run
    result = self.command()
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/script/serve.py",
line 319, in command
    serve()
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/script/serve.py",
line 303, in serve
    server(app)
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/deploy/loadwsgi.py",
line 189, in server_wrapper
    **context.local_conf)
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/deploy/util.py",
line 58, in fix_call
    reraise(*exc_info)
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/deploy/compat.py",
line 23, in reraise
    exec('raise t, e, tb', dict(t=t, e=e, tb=tb))
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/deploy/util.py",
line 55, in fix_call
    val = callable(*args, **kw)
  File
"/usr/lib/ckan/default/lib/python2.7/site-packages/paste/httpserver.py",
line 1342, in server_runner
    serve(wsgi_app, **kwargs)
TypeError: serve() got an unexpected keyword argument 'ssl_perm'

Is there something that we are doing wrong?

Full disclosure, we are currently running ckan 2.5.2.  Is the ssl_perm
property for newer versions of ckan only?

Also, after performing a google search, I was unable to find any
information out about the ssl_perm property.  Is there any documentation
any where that describes how that property works?

Thank you for your time,

Nathan

On Mon, Oct 9, 2017 at 10:42 AM, Tyler Kennedy <tk at tkte.ch> wrote:

> Hello Nathan,
>
> Yes it is. In your .ini file under *[server:main]* add *ssl_perm=**.
>
> However, this should only be used for development. Paster is not an
> acceptable server to use for production, and the ** *will generate a
> temporary development certificate.
>
> Thank you,
> Tyler Kennedy
>
> On Mon, Oct 9, 2017 at 11:27 AM, Nathan Hook <nhook at ucar.edu> wrote:
>
>> Good Day,
>>
>> Is it possible to run the paster serve command under SSL?
>>
>> Any friendly information or direction would be greatly appreciated.
>>
>> Thank you for your time,
>>
>> Nathan
>>
>>
>> _______________________________________________
>> ckan-dev mailing list
>> ckan-dev at lists.okfn.org
>> https://lists.okfn.org/mailman/listinfo/ckan-dev
>> Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
>>
>>
>
> _______________________________________________
> ckan-dev mailing list
> ckan-dev at lists.okfn.org
> https://lists.okfn.org/mailman/listinfo/ckan-dev
> Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20171010/95896273/attachment-0003.html>