apache / apache/couchdb

Unable to disable port 5984 when using SSL / https

Open
#2,106 3 comments 10 reactions 0 assignees View on GitHub
enhancement
Dominant language
Erlang
Stars
7k
Forks
1.1k
Avg merge
1d 16h
Merged PRs (30d)
9

Description

## Description

It should be possible to configure CouchDB to serve documents only over an SSL port (default: 6984) and not the insecure http port (defautl: 5984).

## Steps to Reproduce

_n/a_

## Expected Behaviour

CouchDB only binds to port 6984 with the httpsd daemon.

## Your Environment

* CouchDB Version used: `master`

## Additional context

This is a common request, and something we lost when we made security settings changes in 2.3.1, since it is no longer possible to disable the daemon via `[daemons]`.

Contributor guide

Open the contributing guide

Research direction

Start by tracing how the [daemons] configuration and the httpd and httpsd entry points are handled after the 2.3.1 security settings changes. Check the existing configuration and daemon tests before determining how disabling the insecure daemon should be represented. Done means CouchDB binds only to the configured SSL port while the HTTP port remains disabled.

Written by the indexing model from the issue text.

Assessment

Tech stack
erlang
Domain
backend, databases, networking, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.