You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@netbeans.apache.org by Benjamin Asbach <ne...@impl.it> on 2020/03/04 12:03:08 UTC
https redirection for apache.netbeans.org
Hi,
I wonder if it's supposed that http://apache.netbeans.org does not
redirect to https://apache.netbeans.org?
Maybe enable HSTS would be another option too.
--
Thanks
Benjamin
Re: netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by antonio <an...@vieiro.net>.
Let's go then.
Do we want to also redirect wiki.netbeans.org to
netbeans.apache.org/wiki and platform.netbeans.org/tutorials to
netbeans.apache.org/tutorials or do we want to do that later on?
Thanks,
Antonio
El 15/3/20 a las 19:08, Geertjan Wielenga escribió:
> Let’s do that, i.e., have infra do it, and iterate as needed.
>
> Gj
>
> On Sun, 15 Mar 2020 at 19:03, antonio <an...@vieiro.net> wrote:
>
>> Hi,
>>
>> netbeans.apache.org infrastructure is _not_ under our control, it's ASF
>> Infra that's handling the infrastructure. So we cannot modify the web
>> server settings, for example.
>>
>> All we can do is to modify the .htaccess and do incremental upgrades to
>> HTTPS for certain sections (as in [1]). Using .htacess is not going to
>> give us the best performance, though.
>>
>> So, AFAIK, the plan is (correct me if wrong)
>>
>> 1. Redirect netbeans.org to netbeans.apache.org
>>
>> Already done at https://issues.apache.org/jira/browse/INFRA-17245
>>
>> Note that only the netbeans.org (and www.netbeans.org) CNAMES will be
>> redirected.
>>
>> The rest (wiki.netbeans.org, platform.netbeans.org, hg.netbeans.org,
>> etc., should not be altered). platform.netbeans.org could be also
>> redirected, I think.
>>
>> 2. See if anything breaks.
>>
>> 3. Do incremental upgrades to HTTPS (as in [1] below)
>>
>> 4. See if anything breaks.
>>
>> 5. goto 3 until everything works.
>>
>> 6. Remove incremental HTTPS upgrades in .htaccess
>>
>> 7. Done.
>>
>> Cheers,
>> Antonio
>>
>>
>>
>> [1]
>>
>> https://www.inmotionhosting.com/support/website/ssl/how-to-force-https-using-the-htaccess-file/
>>
>>
>> El 15/3/20 a las 11:56, Neil C Smith escribió:
>>> On Sun, 15 Mar 2020, 10:24 antonio, <an...@vieiro.net> wrote:
>>>
>>>> Once we check 1. works we can proceed with 3, and see if all tooling is
>>>> able to dowload DTDs using HTTPS.
>>>>
>>>
>>> That assumes blanket https redirect. We could do this incrementally,
>>> redirect key pages to https, eg. home page, downloads section, etc.
>> before
>>> that. Possibly anything html?
>>>
>>> Best wishes,
>>>
>>> Neil
>>>
>>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
>> For additional commands, e-mail: dev-help@netbeans.apache.org
>>
>> For further information about the NetBeans mailing lists, visit:
>> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>>
>>
>>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by Geertjan Wielenga <ge...@apache.org>.
Let’s do that, i.e., have infra do it, and iterate as needed.
Gj
On Sun, 15 Mar 2020 at 19:03, antonio <an...@vieiro.net> wrote:
> Hi,
>
> netbeans.apache.org infrastructure is _not_ under our control, it's ASF
> Infra that's handling the infrastructure. So we cannot modify the web
> server settings, for example.
>
> All we can do is to modify the .htaccess and do incremental upgrades to
> HTTPS for certain sections (as in [1]). Using .htacess is not going to
> give us the best performance, though.
>
> So, AFAIK, the plan is (correct me if wrong)
>
> 1. Redirect netbeans.org to netbeans.apache.org
>
> Already done at https://issues.apache.org/jira/browse/INFRA-17245
>
> Note that only the netbeans.org (and www.netbeans.org) CNAMES will be
> redirected.
>
> The rest (wiki.netbeans.org, platform.netbeans.org, hg.netbeans.org,
> etc., should not be altered). platform.netbeans.org could be also
> redirected, I think.
>
> 2. See if anything breaks.
>
> 3. Do incremental upgrades to HTTPS (as in [1] below)
>
> 4. See if anything breaks.
>
> 5. goto 3 until everything works.
>
> 6. Remove incremental HTTPS upgrades in .htaccess
>
> 7. Done.
>
> Cheers,
> Antonio
>
>
>
> [1]
>
> https://www.inmotionhosting.com/support/website/ssl/how-to-force-https-using-the-htaccess-file/
>
>
> El 15/3/20 a las 11:56, Neil C Smith escribió:
> > On Sun, 15 Mar 2020, 10:24 antonio, <an...@vieiro.net> wrote:
> >
> >> Once we check 1. works we can proceed with 3, and see if all tooling is
> >> able to dowload DTDs using HTTPS.
> >>
> >
> > That assumes blanket https redirect. We could do this incrementally,
> > redirect key pages to https, eg. home page, downloads section, etc.
> before
> > that. Possibly anything html?
> >
> > Best wishes,
> >
> > Neil
> >
> >>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
> For additional commands, e-mail: dev-help@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>
Re: netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by antonio <an...@vieiro.net>.
Hi,
netbeans.apache.org infrastructure is _not_ under our control, it's ASF
Infra that's handling the infrastructure. So we cannot modify the web
server settings, for example.
All we can do is to modify the .htaccess and do incremental upgrades to
HTTPS for certain sections (as in [1]). Using .htacess is not going to
give us the best performance, though.
So, AFAIK, the plan is (correct me if wrong)
1. Redirect netbeans.org to netbeans.apache.org
Already done at https://issues.apache.org/jira/browse/INFRA-17245
Note that only the netbeans.org (and www.netbeans.org) CNAMES will be
redirected.
The rest (wiki.netbeans.org, platform.netbeans.org, hg.netbeans.org,
etc., should not be altered). platform.netbeans.org could be also
redirected, I think.
2. See if anything breaks.
3. Do incremental upgrades to HTTPS (as in [1] below)
4. See if anything breaks.
5. goto 3 until everything works.
6. Remove incremental HTTPS upgrades in .htaccess
7. Done.
Cheers,
Antonio
[1]
https://www.inmotionhosting.com/support/website/ssl/how-to-force-https-using-the-htaccess-file/
El 15/3/20 a las 11:56, Neil C Smith escribió:
> On Sun, 15 Mar 2020, 10:24 antonio, <an...@vieiro.net> wrote:
>
>> Once we check 1. works we can proceed with 3, and see if all tooling is
>> able to dowload DTDs using HTTPS.
>>
>
> That assumes blanket https redirect. We could do this incrementally,
> redirect key pages to https, eg. home page, downloads section, etc. before
> that. Possibly anything html?
>
> Best wishes,
>
> Neil
>
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by Geertjan Wielenga <ge...@apache.org>.
Let’s do the incremental approach — and we can do all this on the Apache
side, without Infra involvement, right? If so, shall we start with the home
page and see how it goes?
Gj
On Sun, 15 Mar 2020 at 11:56, Neil C Smith <ne...@apache.org> wrote:
> On Sun, 15 Mar 2020, 10:24 antonio, <an...@vieiro.net> wrote:
>
> > Once we check 1. works we can proceed with 3, and see if all tooling is
> > able to dowload DTDs using HTTPS.
> >
>
> That assumes blanket https redirect. We could do this incrementally,
> redirect key pages to https, eg. home page, downloads section, etc. before
> that. Possibly anything html?
>
> Best wishes,
>
> Neil
>
> >
>
Re: netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by Neil C Smith <ne...@apache.org>.
On Sun, 15 Mar 2020, 10:24 antonio, <an...@vieiro.net> wrote:
> Once we check 1. works we can proceed with 3, and see if all tooling is
> able to dowload DTDs using HTTPS.
>
That assumes blanket https redirect. We could do this incrementally,
redirect key pages to https, eg. home page, downloads section, etc. before
that. Possibly anything html?
Best wishes,
Neil
>
netbeans.org rerouting to netbeans.apache.org (was Re: https
redirection for apache.netbeans.org)
Posted by antonio <an...@vieiro.net>.
Hi,
I've just seen this message.
The suggested order is to follow baby steps in this order:
1. Reroute netbeans.org to netbeans.apache.org.
2. See if anything breaks.
3. Enforce https on the site.
4. See if anything breaks.
We tried 1. above a while back, and we discovered that the build system
downloaded DTDs via plain http.
I think the build system uses local DTDs now (and we already have all
DTDs in place in netbeans.apache.org), but maybe 1. above fails again.
Once we check 1. works we can proceed with 3, and see if all tooling is
able to dowload DTDs using HTTPS.
Kind regards,
Antonio
El 4/3/20 a las 13:06, Geertjan Wielenga escribió:
> netbeans.apache.org
>
> Gj
>
> On Wed, 4 Mar 2020 at 13:03, Benjamin Asbach <ne...@impl.it> wrote:
>
>> Hi,
>>
>> I wonder if it's supposed that http://apache.netbeans.org does not
>> redirect to https://apache.netbeans.org?
>>
>> Maybe enable HSTS would be another option too.
>>
>> --
>> Thanks
>> Benjamin
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: https redirection for apache.netbeans.org
Posted by Geertjan Wielenga <ge...@apache.org>.
If we can, we should.
Gj
On Wed, Mar 4, 2020 at 1:14 PM Neil C Smith <ne...@apache.org> wrote:
> On Wed, 4 Mar 2020 at 12:06, Geertjan Wielenga <ge...@apache.org>
> wrote:
> >
> > netbeans.apache.org
>
> Does have the noted problem though! Was thinking this yesterday while
> checking something on the site.
>
> Is it time to enforce https by redirect? I think we should, although
> IIRC there was a reason we didn't initially.
>
> Best wishes,
>
> Neil
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
> For additional commands, e-mail: dev-help@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>
RE: https redirection for apache.netbeans.org
Posted by Eric Barboni <sk...@apache.org>.
I see other TLP project having redirect.
It's better for referencing to be https ?
Regards
Eric
-----Message d'origine-----
De : Benjamin Asbach <ne...@impl.it>
Envoyé : mercredi 4 mars 2020 13:50
À : dev@netbeans.apache.org
Objet : Re: https redirection for apache.netbeans.org
Maybe before adding HSTS Headers it would make sense to do a
redirect/rewrite to see if some other issues pop up with forced ssl.
---
Thanks
Benjamin
On 2020-03-04 13:14, Neil C Smith wrote:
> On Wed, 4 Mar 2020 at 12:06, Geertjan Wielenga <ge...@apache.org>
> wrote:
>>
>> netbeans.apache.org
>
> Does have the noted problem though! Was thinking this yesterday while
> checking something on the site.
>
> Is it time to enforce https by redirect? I think we should, although
> IIRC there was a reason we didn't initially.
>
> Best wishes,
>
> Neil
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
> For additional commands, e-mail: dev-help@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: https redirection for apache.netbeans.org
Posted by Benjamin Asbach <ne...@impl.it>.
Maybe before adding HSTS Headers it would make sense to do a
redirect/rewrite to see if some other issues pop up with forced ssl.
---
Thanks
Benjamin
On 2020-03-04 13:14, Neil C Smith wrote:
> On Wed, 4 Mar 2020 at 12:06, Geertjan Wielenga <ge...@apache.org>
> wrote:
>>
>> netbeans.apache.org
>
> Does have the noted problem though! Was thinking this yesterday while
> checking something on the site.
>
> Is it time to enforce https by redirect? I think we should, although
> IIRC there was a reason we didn't initially.
>
> Best wishes,
>
> Neil
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
> For additional commands, e-mail: dev-help@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: https redirection for apache.netbeans.org
Posted by Neil C Smith <ne...@apache.org>.
On Wed, 4 Mar 2020 at 12:06, Geertjan Wielenga <ge...@apache.org> wrote:
>
> netbeans.apache.org
Does have the noted problem though! Was thinking this yesterday while
checking something on the site.
Is it time to enforce https by redirect? I think we should, although
IIRC there was a reason we didn't initially.
Best wishes,
Neil
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
Re: https redirection for apache.netbeans.org
Posted by Geertjan Wielenga <ge...@apache.org>.
netbeans.apache.org
Gj
On Wed, 4 Mar 2020 at 13:03, Benjamin Asbach <ne...@impl.it> wrote:
> Hi,
>
> I wonder if it's supposed that http://apache.netbeans.org does not
> redirect to https://apache.netbeans.org?
>
> Maybe enable HSTS would be another option too.
>
> --
> Thanks
> Benjamin