Make EVE use https and ssh instead http and telnet per default

Features you'd like to see in the upcoming version of EVE-NG

Moderator: mike

Post Reply
Chris929
Posts: 83
Joined: Tue Jun 27, 2017 8:51 am

Make EVE use https and ssh instead http and telnet per default

Post by Chris929 » Thu Jul 20, 2017 7:20 am

Hi,

would it be a big issue to make eve run with https via default?
Currently you have to manually fix this (http://www.eve-ng.net/index.php/documen ... ssl-on-eve) - would be great if EVE would also participate in the https everywhere ;)
Also it would be nice if the Devices from the lab could be accessible via ssh (with username and password) - currently anyone who knows the EVE-IP and Port can access the Lab-Devices Console Port without authentication - since it would be nice to hook eve up to the internet for everywhere access this is a must have. Currently I "solve" this by using a Private IP and VPN to access my eve at home.


Regards
Chris

ecze
Posts: 533
Joined: Wed Mar 15, 2017 1:54 pm

Re: Make EVE use https and ssh instead http and telnet per default

Post by ecze » Thu Jul 20, 2017 8:38 am

This will not happens...

1. HTTPS Howto is enough
2. Clear telnet is the preferred way. If security matters is critical, the correct way to use EVE is: HTTPS + HTML5 Console ( to use for remote access labs )


E.

Chris929
Posts: 83
Joined: Tue Jun 27, 2017 8:51 am

Re: Make EVE use https and ssh instead http and telnet per default

Post by Chris929 » Fri Jul 21, 2017 11:48 am

Hi E.
thanks for the reply.

Point 1 is acceptable, however I personally disagree on point 2.
Telnet should never be a preferred way if there is ssh.
We live in a time where security is essential and therefore should be used everywhere. Security matters is always critical.
Would it be technically possible without changing too much? If yes this should be the way to go.
If not - well - something went wrong in the first place ;)

In this case I stick with my IPsec VPN and access EVE only through IPsec.
However no one using PRO or Education will acknowledge / accept this if you want to distribute this some day - Just my 2 cents...

Regards
Chris

ecze
Posts: 533
Joined: Wed Mar 15, 2017 1:54 pm

Re: Make EVE use https and ssh instead http and telnet per default

Post by ecze » Fri Jul 21, 2017 1:20 pm

You completely miss the usage of EVE-NG.

It is not a solution to provide an open acces from Internet.
The community edition is not for business and should be used for personnal usage only.

Ssh make live too complicate for users. Better option is a VPN as you said.
Currently, advanced users build themselves this security protection, but future EVE PRO or Learnig edition center could support also a bundled VPN solution.

E.

Chris929
Posts: 83
Joined: Tue Jun 27, 2017 8:51 am

Re: Make EVE use https and ssh instead http and telnet per default

Post by Chris929 » Mon Jul 24, 2017 1:16 pm

Great - thanks :)

Post Reply