New SSL Certificates - Githubissues

hbz / nwbib

Die Nordrhein-Westfälische Bibliographie

http://nwbib.de

3 stars 2 forks source link

New SSL Certificates #476

Closed dr0i closed 5 years ago

dr0i commented 5 years ago

As in hbz/lobid#383.

[x] nwbib.de
[x] www.nwbib.de ~- [ ] beta.nwbib.de~
[x] test.nwbib.de

@fsteeg @acka47 do we really need certificates for test-servers?

dr0i commented 5 years ago

As discussed with @fsteeg we need not beta.nwbib.de but test.nwbib.de to be able for real tests like openrefine which may depend on ssl.

dr0i commented 5 years ago

Got a call from IT: it's possible to cover several domainnames using one certificate ("Subject Alternative Name (SAN)") if these remain on the same machine. How cool is this? So we just need one certificate for all nwbib domains. (It also would be possible to cover other domains like lobid.org, but considering security it would be better to have more certificates, so we will restrict it to a hostname with it's subdomains.)

dr0i commented 5 years ago

Deployed, please review.

acka47 commented 5 years ago

+1. Closing