Re: Encrypted repos (https/ftps)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi again,

First of all BIG THANKS TO ALL MIRROR HOSTERS! :-)

I made a quick test which mirrors already work with encrypted
connections, but only with HTTPS so far.
This seems to be just a very few, but at least some. And i might have
missed some, because i used Tor.

===============================
Mirrors that work with SSL/TLS:
===============================

Australia:
- ----------
https://mirror.cse.unsw.edu.au/pub/debian/

Bulgaria:
- ---------
https://debian.ludost.net/debian/

Canada:
- -------
https://mirror.cpsc.ucalgary.ca/mirror/debian.org/debian/

China:
- ------
https://debian.ustc.edu.cn/debian/

Germany:
- --------
https://ftp.mpi-sb.mpg.de/pub/mirrors/linux/debian/
https://ftp-stud.hs-esslingen.de/debian/

Japan:
- ------
https://dennou-h.gfd-dennou.org/debian/
https://dennou-q.gfd-dennou.org/debian/

Netherlands:
- ------------
https://mirror.i3d.net/pub/debian/

Russia:
- -------
https://ftp.corbina.net/debian/

United Kingdom:
- ----------------
https://mirror.vorboss.net/debian/
https://the.earth.li/debian/

United States:
- --------------
https://mirror.hmc.edu/debian/
https://mirrors.kernel.org/debian/
https://mirrors.xmission.com/debian/
https://spout.ussg.indiana.edu/linux/debian/
(https://mirrors.linux.iu.edu/linux/debian/)

=======
Issues:
=======

502 Bad Gateway
- ---------------
https://kambing.ui.ac.id/debian

gnutls_handshake() warning: The server name sent was not recognized
- -------------------------------------------------------------------
https://dennou-k.gfd-dennou.org/debian/
https://ftp.is.debian.org/debian/
https://ftp.uni-erlangen.de/debian/
https://mirrors.ocf.berkeley.edu/debian/
https://opensource.nchc.org.tw/debian/

server certificate verification failed. CAfile:
/etc/ssl/certs/ca-certificates.crt CRLfile: none
-
------------------------------------------------------------------------------------------------
https://debian.morphium.info/debian/
https://ftp.gva.es/mirror/debian/
https://ftp.informatik.uni-frankfurt.de/debian/
https://merlin.fit.vutbr.cz/debian/
https://noodle.portalus.net/debian/

others
- ------
SSL: certificate subject name (*.corbina.net) does not match target host
name 'mirror2.corbina.ru
for https://mirror2.corbina.ru/debian/

More servers already have certs installed, but not configured correctly
for the mirror, like https://debian.mirrors.crysys.hu/ or
https://mirror.poliwangi.ac.id/debian

Greetings
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=G10a
-----END PGP SIGNATURE-----