Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Failure to Initialize a Secure Transport Layer (TLS) During Out-of-the-Box Setup.

Open
#14,074 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
25/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Active
Tech stack
java
Domain
api, backend, security

Research direction

Start by following the official CloudStack deployment documentation and reproduce the HTTP access on port 8080 and failed HTTPS access on port 8443. Review the out-of-the-box setup for the Management UI/API, SSVM, and CPVM; done means TLS is enabled by default and management traffic is not exposed in cleartext.

Written by the indexing model from the issue text.

Description

component:management-server type:security
The required feature described as a wish

Description: TLS is not enabled by default on the Management server or System VMs. This insecure default persists until explicitly remediated by the administrator.

Affected Component: Management UI / API, SSVM, CPVM

Impact: An attacker with network access can trivially intercept or sniff management traffic, including administrator credentials (password and 2FA codes), session tokens, API keys, and sensitive configuration data.

Steps to Reproduce:

  • Deploy ACS following the official documentation.
  • Navigate to http://:8080/ (no HTTPS redirect occurs).
  • Attempt to connect to https://:8443/ and confirm that the connection fails.
  • Capture traffic with Wireshark or tcpdump during a login session.
  • Observe that credentials and session tokens are transmitted in cleartext.

Recommended Remediation: Enable TLS by default during installation. A self-signed certificate can be automatically generated and configured without any additional effort on the user's part.

Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 20h
Merged PRs (30d)
27

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from apache/cloudstack

All issues in apache/cloudstack

Similar issues

More Java issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.