infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Greg Stein (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (INFRA-15476) Allow incubating Freemarker project to use HTTPS instead of HTTP
Date Wed, 29 Nov 2017 07:41:00 GMT

     [ https://issues.apache.org/jira/browse/INFRA-15476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Greg Stein updated INFRA-15476:
-------------------------------
    Review Date:   (was: 29/Nov/17)
         Status: Waiting for user  (was: Waiting for Infra)

Okay. ... I didn't explain enough in my prior comment. Sorry about that.

We cannot install the *.apache.org certificate on project VMs. That is closely held to very
limited machines, for security purposes.

There are examples of project VMs using LetsEncrypt for their certificates. I would suggest
following their lead, and using LE for the freemarker VM (and whatever hostnames pointed at
that VM).

> Allow incubating Freemarker project to use HTTPS instead of HTTP
> ----------------------------------------------------------------
>
>                 Key: INFRA-15476
>                 URL: https://issues.apache.org/jira/browse/INFRA-15476
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: VM
>            Reporter: Jacques Le Roux
>            Assignee: Greg Stein
>
> Currently the incubating Freemarker project uses http://freemarker.apache.org/ we would
like that it rather uses HTTPS mostly  for SEO reasons.
> I began to look at it. It seems to me that a configuration like drat one would be enough,
something like
> ---
> classes:
>   - loggy
>   - letsencrypt
> base::basepackages:
>   - 'openjdk-8-jdk'
> letsencrypt::email: 'root@apache.org'
> letsencrypt::manage_dependencies: false
> letsencrypt::certonly:
>   freemarker:
>     domains:
>       - freemarker-vm.apache.org
>     plugin: standalone
>     manage_cron: true
>     cron_success_command: 'service apache2 reload'
> But I'm unsure about that because I find no reference of drat in themis config but one
for freemarker.
> So maybe introducing a freemarker-ssl in themis config is needed? Or simply replace freemarker
config by freemarker-ss, or maybe even remove it and use a simple freemarker-vm.apache.org.yaml
with content shown above? Because there is no user interactions with this site. It's only
documentation...



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message