Re: SSL for PHP mirrors

Hi!

I believe there could be few ways to work around this but that would boil
down to provisioning one cert to all of mirrors, which is not very secure
solution :)



On Tue, Dec 22, 2015 at 5:47 AM, Rasmus Lerdorf <[email protected]> wrote:

> On Dec 21, 2015, at 18:16, Hannes Magnusson <[email protected]>
> wrote:
> >
> >> On Mon, Dec 14, 2015 at 1:09 PM, Kaspars Foigts <[email protected]> wrote:
> >> Hi!
> >>
> >> Since let's encrypt <https://letsencrypt.org/> has been launched into
> >> public beta, in theory it is possible for each mirror's maintainer to
> set
> >> up a domain validated SSL virtualhost without involvement php.net team
> (see
> >> an example I set up at mine - https://lv.php.net/).
> >
> >
> > Nice !
> >
> > I haven't had the time to look at this or really how letsencyrpt
> > works. How did you verify lv.php.net? Would you be able to get the
> > same cert for www?
>
> It would be cool if we could do per-mirror certs with letsencrypt and do a
> SAN (subject alternate name) containing www.php.net. So it would be
> lv.php.net and www.php.net on the same cert, for example. But I don't
> know what we could set up to game their verification system to make this
> work. It should be possible to set up something centrally that lets mirror
> maintainers somehow proxy the verification.
>
> -Rasmus




-- 
Kaspars
http://laacz.lv/