[Qemu-devel] HTTPS on qemu.org

[Qemu-devel] HTTPS on qemu.org

[Martin Rys]

Hi, I don't know which mailing list to use for website things, so I'm
just using devel, hopefully reaching the correct people.

https://www.ssllabs.com/ssltest/analyze.html?d=qemu.org

Qemu.org still uses HTTP (it should redirect from HTTP to HTTPS
instead) and HTTPS is broken, only because the TLS certificate seems
to be self-generated.

You can easily get a free non-wildcard certificate from Let's Encrypt
via certbot and automate certificate renewing with something as easy
as a cron job that calls certbot.

https://letsencrypt.org/

Hopefully I'll see you switch to HTTPS in the future!

Thanks, Martin.

Re: [Qemu-devel] HTTPS on qemu.org

[Alex Bennée]

Martin Rys <spleefer90@gmail.com> writes:

> Hi, I don't know which mailing list to use for website things, so I'm
> just using devel, hopefully reaching the correct people.
>
> https://www.ssllabs.com/ssltest/analyze.html?d=qemu.org
>
> Qemu.org still uses HTTP (it should redirect from HTTP to HTTPS
> instead) and HTTPS is broken, only because the TLS certificate seems
> to be self-generated.

The https URL also takes you to the Apache default pages (if you skip
the dire warnings). Anyway CC'ing the relevant names as per:

  http://wiki.qemu.org/AdminContacts

>
> You can easily get a free non-wildcard certificate from Let's Encrypt
> via certbot and automate certificate renewing with something as easy
> as a cron job that calls certbot.
>
> https://letsencrypt.org/
>
> Hopefully I'll see you switch to HTTPS in the future!
>
> Thanks, Martin.


--
Alex Bennée