On Tue, Mar 27, 2018 at 09:52:22PM -0400, Endi Sukma Dewata wrote:
----- Original Message -----
> On Tue, Mar 27, 2018 at 11:16:01AM -0400, Endi Sukma Dewata wrote:
> > Hi,
> >
> > The Dogtag PKI Website URL has changed as follows:
> >
> > * Old URL:
http://pki.fedoraproject.org
> > * New URL:
http://www.dogtagpki.org
> >
> > Please use the new URL whenever possible. The old URL should
> > automatically be redirected to the new URL, so all existing links
> > should continue to work.
> >
> > Unfortunately, there was a glitch during the transition yesterday
> > causing it to be redirected to
redhat.com. If you are experiencing
> > this, you may need to clear the browser cache/history. Please refer
> > to your browser's documentation since the steps are browser-specific.
> >
> > Sorry for the inconvenience. Thanks!
> >
> Thanks for the update, Endi.
>
> Now that the domain change is done, what needs to be done to enable
> TLS?
>
> Thanks,
> Fraser
I think Matt/Nathan is in the process of getting an SSL cert, unless
there's an easy way to use Let's Encrypt?
We should be able to use the ACME HTTP or DNS challenges to get a
certificate from Let's Encrypt. Not sure which would be easiest to
get going (and automate) on OpenShift. Here's a recently published
article on the official OpenShift blog about it:
https://blog.openshift.com/lets-encrypt-acme-v2-api/
It's a shame OpenShift Online hasn't got automatic OOTB TLS support
via ACME/LE yet. I have them a heads-up years ago. We are behind
the competition.
Cheers,
Fraser