downloads.theforeman.org and stagingdeb.theforeman.org is now served via Fastly, enjoy!
On Tue, Dec 12, 2017 at 3:51 PM, Evgeni Golov <[email protected]> wrote: > Just a quick heads-up for everybody. > > We now have the right config and TLS certificates in place to serve > Forman content via Fastly, but we did not change any public DNS > entries yet. > We'll probably start with stagingdeb.tfm.o and downloads.tfm.o soon, > and move to the other vhosts some time in January if no problems > occur. > > Evgeni > > On Mon, Nov 20, 2017 at 1:24 PM, Evgeni Golov <[email protected]> wrote: >> FWIW, deb.d.o runs on a custom LE cert, not on a wildcard, so you >> can't really compare that. >> And cdn-fastly.deb.debian.org (which is the "real" Fastly host apt >> hits) does not have SSL enabled at all. >> >> On Mon, Nov 20, 2017 at 11:58 AM, Greg Sutcliffe >> <[email protected]> wrote: >>> On 20/11/17 10:08, Lukas Zapletal wrote: >>>> Great, thanks. Before moving on, I'd check if yum/deb accepts these >>>> kind of certificates. I *think* so, but I've heard from security guys >>>> they don't like these certs at all :-) >>> >>> Thanks for the heads up, good to know. I believe Fastly is used by the >>> Debian repos themselves, so I *think* it's OK, but we can check. We can >>> always choose not to use their certificate if we want, we have >>> LetsEncrypt setup on that node anyway... >>> >>> Evgeni and I will take a look at this today - Neil, maybe I'll ping you >>> later in the week if we get stuck :) >>> >>> Greg >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "foreman-dev" group. >>> To unsubscribe from this group and stop receiving emails from it, send an >>> email to [email protected]. >>> For more options, visit https://groups.google.com/d/optout. >> >> >> >> -- >> Beste Grüße/Kind regards, >> >> Evgeni Golov >> Software Engineer >> ________________________________________________________________________ >> Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, >> Commercial register: Amtsgericht Muenchen, HRB 153243, >> Managing Directors: Charles Cachera, Michael Cunningham, Michael >> O'Neill, Eric Shander > > > > -- > Beste Grüße/Kind regards, > > Evgeni Golov > Software Engineer > ________________________________________________________________________ > Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, > Commercial register: Amtsgericht Muenchen, HRB 153243, > Managing Directors: Charles Cachera, Michael Cunningham, Michael > O'Neill, Eric Shander -- Beste Grüße/Kind regards, Evgeni Golov Software Engineer ________________________________________________________________________ Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander -- You received this message because you are subscribed to the Google Groups "foreman-dev" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
