On Mon, Mar 10, 2014 at 12:09:14AM +0000, [email protected] wrote 2.6K bytes in 0 lines about: : Does anyone know how to set up a mirror network supporting SSL?
I've seen it done two ways. One way distributes bandwidth by letting people hit each mirror directly. Another way creates a master mirror which redirects to other mirrors. 1. If you are doing dns load balancing, you get a cert for a domain name. Give the cert and key to your mirrors. Then sslmirror.whonix.org works regardless of the mirror. 2. Ask each mirror to get their own cert, and make sslmirror.whonix.org the master site, which then redirects to a list of ssl mirrors via webserver rewrite/redirects. Therefore the ssl cert will match the mirror's name. Such as sslmirror.whonix.org rewrites to (sslmirror.example.com, website.example.net, download.example.org). -- Andrew pgp 0x6B4D6475 -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at [email protected].
