csaf-validator-service missing documentation for test setup with secvisogram about csaf-validator-service HOT 6 CLOSED

Shouldn't that be handled by the reverse proxy? (I might be completely wrong here) 🤔
Can you please describe a little bit more what the setup would look like? (How do you run Secvisogram (Dev/Production, Server/Standalone mode, behind a proxy...) and how did you configure it to work with the validation service?

from csaf-validator-service.

I am currently at the first stage: get it started with all modules in a test environment (currently local virtual machine on my laptop with its own network interface assigned). I am using the setup "out of the box" with the validation service configured to operate on localhost:8081 to be reached directly. Once this is up and running, we can determine what we need to do to turn this into a production setup (inside the enterprise network, reachable via proxy, using enterprise user management, having backup for the configuration and the advisory database...). The full packages looks promising.
I have proposed a CORS support pull request in the csaf-validator-service repo. If this a good idea or not, I don't know, at least it allowed me to get a fully operational TEST installation.
Having this said, I already see the first issue arising: In the mustache Template.html external styles are hardcoded and in a productive environment "weasyprint" will have a hard time loading these styles (behind a firewall, the proxy could be reached but would need authentication, etc.). The styles could of course be inlined (works) but then the automatic tests fail because the text is hard coded there... Should I open an issue for this topic?

from csaf-validator-service.

The styles could of course be inlined (works) but then the automatic tests fail because the text is hard coded there... Should I open an issue for this topic?

Please do so in the appropriate repo.

from csaf-validator-service.

@ljaenicke Is that issue resolved for you?

from csaf-validator-service.

@ljaenicke Does the current version resolve the issue for you?

from csaf-validator-service.

Resolved.

from csaf-validator-service.