www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jacques Le Roux (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-11960) Use "Let's encrypt" for OFBiz demos SSL/TLS certificates
Date Wed, 20 Jul 2016 19:48:20 GMT

    [ https://issues.apache.org/jira/browse/INFRA-11960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15386502#comment-15386502
] 

Jacques Le Roux commented on INFRA-11960:
-----------------------------------------

Thanks Sam, but I don't want to use a HTTPD frontend. We had one between ~2014 and 2016 and
we got issues. OFBiz uses Tomcat embedded and it's really easier for us to avoid a proxy.
We will use renewable letsencrypt certificates in in the OFBiz Java keystore (ofbiz.jks) with
the SANs present. For that, as explained below (04/Jun/16 22:01) we will use our own script,
based on http://blog.ivantichy.cz/blogpost/view/74, to create and maintain the letsencrypt
certificates.

> Use "Let's encrypt" for OFBiz demos SSL/TLS certificates
> --------------------------------------------------------
>
>                 Key: INFRA-11960
>                 URL: https://issues.apache.org/jira/browse/INFRA-11960
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Other/Misc
>            Reporter: Jacques Le Roux
>            Assignee: Daniel Takamori
>
> Currently OFBiz demos use a proxy to share the ASF wide SSL/TLS certificate. Could it
be possible to use "Let's encrypt" SSL/TLS certificates like Sam Ruby did for Whimsy at https://whimsy3.apache.org/
?
> I think it would be a win/win
> - no proxy support for OFBiz by infra, 
> - easier to us, because with the proxy we slightly need to tweak our demos to work with
the proxy and this is currently impacting our trunk demo which no longer correctly works for
few weeks, when it worked before, and works perfectly well on its own (localhost)
> Thanks!



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message