Please setup HTTPS on http://downloads.libremesh.org/

[PabloCastellano]

That subdomain contains firmware images and without https it's easy to distribute trojanized images in certain cases. You can use Let's Encrypt which for ease and free-of-charge.

Have a look at https://certbot.eff.org/ for the setup.

[nicopace]

@p4u can we set this up? I can do it if I get access to it ;)

[ilario]

Right now downloads.libremesh.org has a let's Encrypt certificate. But it's expired... @p4u ?

[gmarcos87]

@ilario https://downloads.libremesh.org is not working

[ilario]

@gmarcos87 yep, it doesn't work neither on builds.libremesh.org nor on repo.libremesh.org nor on libremesh.org But I don't have any access to the servers, I think @p4u is the one for this.

[ilario]

Current situation of HTTPS support in our subdomains:

• [x] https://libremesh.org/
• [x] https://www.libremesh.org/
• [x] https://betaupdate.libremesh.org/
• [x] https://chef.libremesh.org/
• [x] https://ci.libremesh.org/
• [ ] https://wiki.libremesh.org/ invalid
• [x] https://lists.libremesh.org/
• [x] https://builds.libremesh.org/
• [x] https://repo.libremesh.org/
• [ ] https://old.libremesh.org/ invalid
• [x] https://downloads.libremesh.org/
• [x] https://snapshots.libremesh.org/
• [x] https://imagebuilder.libremesh.org/
• [x] https://ib.libremesh.org/

[aparcar]

What is the blocking thing here? https://krackattacks.com is just another reason to push this

[ghost]

I think nearly all of us is able to solve this. Please, let's do it

[nicopace]

Don't have access to this server. I guess @altergui or @nicoechaniz or @p4u can do it

[aparcar]

@PabloCastellano https://downloads.libremesh.org should work now

[ilario]

Thanks @aparcar and @p4u! Closing. The only couple of small things missing, are: redirect all traffic from HTTP to HTTPS on enlist in HTTPS Everywhere lists: https://www.eff.org/https-everywhere/faq#how-do-i-add-my-own-site-to-https-everywhere