Re: SSL for PHP mirrors

On Dec 21, 2015, at 18:16, Hannes Magnusson <[email protected]> wrote:
> 
>> On Mon, Dec 14, 2015 at 1:09 PM, Kaspars Foigts <[email protected]> wrote:
>> Hi!
>> 
>> Since let's encrypt <https://letsencrypt.org/> has been launched into
>> public beta, in theory it is possible for each mirror's maintainer to set
>> up a domain validated SSL virtualhost without involvement php.net team (see
>> an example I set up at mine - https://lv.php.net/).
> 
> 
> Nice !
> 
> I haven't had the time to look at this or really how letsencyrpt
> works. How did you verify lv.php.net? Would you be able to get the
> same cert for www?

It would be cool if we could do per-mirror certs with letsencrypt and do a SAN (subject alternate name) containing www.php.net. So it would be lv.php.net and www.php.net on the same cert, for example. But I don't know what we could set up to game their verification system to make this work. It should be possible to set up something centrally that lets mirror maintainers somehow proxy the verification.

-Rasmus