infra-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Greg Stein (JIRA)" <>
Subject [jira] [Updated] (INFRA-15476) Allow incubating Freemarker project to use HTTPS instead of HTTP
Date Wed, 29 Nov 2017 07:41:00 GMT


Greg Stein updated INFRA-15476:
    Review Date:   (was: 29/Nov/17)
         Status: Waiting for user  (was: Waiting for Infra)

Okay. ... I didn't explain enough in my prior comment. Sorry about that.

We cannot install the * certificate on project VMs. That is closely held to very
limited machines, for security purposes.

There are examples of project VMs using LetsEncrypt for their certificates. I would suggest
following their lead, and using LE for the freemarker VM (and whatever hostnames pointed at
that VM).

> Allow incubating Freemarker project to use HTTPS instead of HTTP
> ----------------------------------------------------------------
>                 Key: INFRA-15476
>                 URL:
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: VM
>            Reporter: Jacques Le Roux
>            Assignee: Greg Stein
> Currently the incubating Freemarker project uses we would
like that it rather uses HTTPS mostly  for SEO reasons.
> I began to look at it. It seems to me that a configuration like drat one would be enough,
something like
> ---
> classes:
>   - loggy
>   - letsencrypt
> base::basepackages:
>   - 'openjdk-8-jdk'
> letsencrypt::email: ''
> letsencrypt::manage_dependencies: false
> letsencrypt::certonly:
>   freemarker:
>     domains:
>       -
>     plugin: standalone
>     manage_cron: true
>     cron_success_command: 'service apache2 reload'
> But I'm unsure about that because I find no reference of drat in themis config but one
for freemarker.
> So maybe introducing a freemarker-ssl in themis config is needed? Or simply replace freemarker
config by freemarker-ss, or maybe even remove it and use a simple
with content shown above? Because there is no user interactions with this site. It's only

This message was sent by Atlassian JIRA

View raw message