Verify TLS certificates expiration on mirrors

etix / mirrorbits

Mirrorbits is a geographical download redirector written in Go for distributing files efficiently across a set of mirrors.

MIT License

497 stars 90 forks source link

Verify TLS certificates expiration on mirrors #95

Open etix opened 5 years ago

etix commented 5 years ago

I originally thought it would be done automatically, but we have seen reports of that mechanism failing.

We should probably not downgrade to HTTP but disable the mirror till the issue is resolved.

ott commented 1 year ago

Do you have more detailed information where this issue occurs? If I'm not mistaken, the HTTP client from net/http should check certificate expiration.