Re: [Tails-dev] TLS certificate for git.tails.boum.org

Delete this message

Reply to this message
Author: sycamoreone
Date:  
To: tails-dev
Subject: Re: [Tails-dev] TLS certificate for git.tails.boum.org
Hi,

just some notes.

flapflap:
> I get a certificate warning when visiting https://git.tails.boum.org,
> issued by immerda.ch.


The certificate served by https://git.tails.boum.org is signed by
immerda.ch itself (CN of the issuer is immerda_public_web_4-ca), so it
won't be accepted by browser by default.

But this is probably not much of a problem, as I don't believe that site
is really for general use: The official place for Tails' Git
repositories is https://git-tails.immerda.ch/, which has a proper
certificate signed by Gandi Standard SSL CA 2. git.tails.boum.org is
only used by "developers with write access to the repositories" (see
https://tails.boum.org/contribute/git/).

That of course doesn't mean that having a letsencrypt certificate
wouldn't be great :).

Cheers!