Re: SSL for PHP mirrors

On Mon, Dec 14, 2015 at 1:09 PM, Kaspars Foigts <[email protected]> wrote:
> Hi!
>
> Since let's encrypt <https://letsencrypt.org/> has been launched into
> public beta, in theory it is possible for each mirror's maintainer to set
> up a domain validated SSL virtualhost without involvement php.net team (see
> an example I set up at mine - https://lv.php.net/).


Nice !

I haven't had the time to look at this or really how letsencyrpt
works. How did you verify lv.php.net? Would you be able to get the
same cert for www?


> Will there be any official position on using domain validated certificates
> to serve php.net mirrors? Also, if I recall correctly, recently deployed
> GeoDNS solution won't support any SSL certs when served via "www.php.net"
> and "php.net" hostnames, right?

The reason for GeoDNS not being able to support https was that not all
mirrors answer https and the user will therefore "sometimes" be sent
to a mirror that doesn't work.
If all mirrors support it, then it'll work just fine.

-Hannes