[jira] [Commented] (INFRA-6608) Apply SSL for openoffice.org services and related changes to proxy setup

["Andrea Pescetti (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-6608?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13728630#comment-13728630 ] 

Andrea Pescetti commented on INFRA-6608:
----------------------------------------

Forum is
http(s)://forum.openoffice.org

And we will want to use it, even though there is no authentication there, for
http(s)://www.openoffice.org
(this is mainly because we receive a steady, even if low, amount of complaints from users who cannot browse our main site on HTTPS).
                
> Apply SSL for openoffice.org services and related changes to proxy setup
> ------------------------------------------------------------------------
>
>                 Key: INFRA-6608
>                 URL: https://issues.apache.org/jira/browse/INFRA-6608
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>          Components: Website
>         Environment: ooo-wiki2-vm, erebus-ssl and eos (updates.o.o)
>            Reporter: jan iversen
>
> AOO want to have the cert that ASF bought, to be used for all https based services.
> today this is:
> http(s)://updates.openoffice.org
> http(s)://ooo-updates.apache.org
> http(s)://wiki.openoffice.org
> http(s)://forums.openoffice.org
> The cert should be installed on the proxy, and between proxy and vm we should use a private cert. Using a private cert between proxy and vm will make maintenance easier, and decouple the physical localtion of the vm from the proxy. Today we have http between proxy and vm, which is a security risk when the VM is not hosted on the same vmCenter as the proxy.
> Since I do maintenance on wiki and forums, I would like to help with the implementation.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira