SSL on download1.rpmfusion.org

[Nicolas Chauvet]

2016-10-24 18:43 GMT+02:00 Sérgio Basto <sergio at serjux.com>:
> On Sáb, 2016-09-24 at 22:30 +0200, Kevin Kofler wrote:
>> Nicolas Chauvet wrote:
>> >
>> > letsencrypt doesn't provide wildcard, and that will be a different
>> > server (so a different cert).
>> It doesn't allow wildcards, but it allows you to give up to 100 SANs
>> (subject alternative names) for a certificate (the canonical one and
>> 99
>> more). So you can use the same cert for all *.rpmfusion.org
>> subdomains
>> (unless there are more than 100), but of course you don't have to.
>
> Hello ,
> To follow up which SANs do we need , I propose one bug tracker.
> A few days ago expired the certificate of http://lists.rpmfusion.org  w
> hich was from CAcert ...

Once again, this would requires the service to be migrated to the new infra.
This is on track, but still help is welcomed.

One could help to translate the mailman ansible role from fedora infra
to our... and test it on your own VM...



-- 
-

Nicolas (kwizart)