----- Original Message ----- > On Tue, Mar 27, 2018 at 09:52:22PM -0400, Endi Sukma Dewata wrote: > > ----- Original Message ----- > > > On Tue, Mar 27, 2018 at 11:16:01AM -0400, Endi Sukma Dewata wrote: > > > > Hi, > > > > > > > > The Dogtag PKI Website URL has changed as follows: > > > > > > > > * Old URL: http://pki.fedoraproject.org > > > > * New URL: http://www.dogtagpki.org > > > > > > > > Please use the new URL whenever possible. The old URL should > > > > automatically be redirected to the new URL, so all existing links > > > > should continue to work. > > > > > > > > Unfortunately, there was a glitch during the transition yesterday > > > > causing it to be redirected to redhat.com. If you are experiencing > > > > this, you may need to clear the browser cache/history. Please refer > > > > to your browser's documentation since the steps are browser-specific. > > > > > > > > Sorry for the inconvenience. Thanks! > > > > > > > Thanks for the update, Endi. > > > > > > Now that the domain change is done, what needs to be done to enable > > > TLS? > > > > > > Thanks, > > > Fraser > > > > I think Matt/Nathan is in the process of getting an SSL cert, unless > > there's an easy way to use Let's Encrypt? > > > > We should be able to use the ACME HTTP or DNS challenges to get a > certificate from Let's Encrypt. Not sure which would be easiest to > get going (and automate) on OpenShift. Here's a recently published > article on the official OpenShift blog about it: > > https://blog.openshift.com/lets-encrypt-acme-v2-api/ > > It's a shame OpenShift Online hasn't got automatic OOTB TLS support > via ACME/LE yet. I have them a heads-up years ago. We are behind > the competition. > > Cheers, > Fraser
Thanks for the info. There's also an older article about that: https://blog.openshift.com/create-https-based-encrypted-urls-using-routes/ but I haven't been able to get it working. Maybe I'll be able to revisit this in a few weeks. HTTP challenge should be easier since we have access to the server. -- Endi S. Dewata _______________________________________________ Pki-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/pki-devel
