[Systems] git.sugarlabs.org Secure Connection Failed

Aleksey Lim alsroot at sugarlabs.org
Mon May 25 00:19:06 EDT 2015


On Mon, May 11, 2015 at 08:53:57PM -0400, Bernie Innocenti wrote:
> And by the way, we should get updated SSL certificates from Gandi. These 
> still use SHA1 which makes all recent browsers barf (rightfully).
> 
> Also, Jita is still allowing SSLv3? Any idea why? It seemed deliberate 
> so I didn't change it. We should also look into upgrading Jita to Ubuntu 
> 14.04 asap.

I allowed it while trying to find out SSL issue and did not revert it back.
It is disabled for now.

> On 05/11/2015 08:46 PM, Bernie Innocenti wrote:
> > FOUND! The solution was to move a virtualhost defined in
> > conf.d/000-default.conf to sites-enabled/000-default and split it in two
> > separate hosts, one for port 80 and one for port 443.
> >
> > I *think* I didn't break anything else, but please double check. The
> > details of my change are in commit 6b78a6d4306 of etckeeper.
> >
> > This could be further improved by moving all the stuff in common between
> > http and https to a shared include file.

Thanks, I did not manage to find it by myself.

-- 
Aleksey


More information about the Systems mailing list