[Buildbot] #2889: Check HMAC in github change hook

Buildbot trac trac at buildbot.net
Mon Sep 8 00:16:50 UTC 2014


#2889: Check HMAC in github change hook
------------------------+-----------------------
Reporter:  bgilbert     |      Owner:
    Type:  enhancement  |     Status:  new
Priority:  minor        |  Milestone:  undecided
 Version:  master       |   Keywords:
------------------------+-----------------------
 !GitHub webhook events can include an HMAC signature.  This provides
 better security than `change_hook_auth` on non-SSL connections: the
 message content is authenticated, and no secrets are transmitted in the
 clear.

 Support validating the HMAC in the !GitHub change hook.  Attached is a
 working patch against 0.8.9 that may be useful as a starting point.

--
Ticket URL: <http://trac.buildbot.net/ticket/2889>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation


More information about the bugs mailing list