Re: pkg and https-based repo with self-signed cert

> On 06 Feb 2015, at 20:03, Marko Cupać wrote: > > On Fri, 6 Feb 2015 18:19:16 +0100 > Kurt Jaeger wrote: > >> It's more along the lines of 'encrypt all the things'... >> >> I'm playing with changing all http stuff to https in general and >> one of them is my repo... > > Indeed, it could h

Re: pkg and https-based repo with self-signed cert

On Fri, 6 Feb 2015 18:19:16 +0100 Kurt Jaeger wrote: > It's more along the lines of 'encrypt all the things'... > > I'm playing with changing all http stuff to https in general and > one of them is my repo... Indeed, it could happen that - in a few years or a few decades - someone finds log wit

Re: pkg and https-based repo with self-signed cert

Hi! > > How do I get pkg to accept a self-signed cert if the repo is running > > under https ? > > Thanks for any hints! > There is no need to use TLS as transport encryption, because repos can > be signed. It's more along the lines of 'encrypt all the things'... I'm playing with changing all

Re: pkg and https-based repo with self-signed cert

On 05.02.2015 21:52, Kurt Jaeger wrote: Hi! How do I get pkg to accept a self-signed cert if the repo is running under https ? Thanks for any hints! There is no need to use TLS as transport encryption, because repos can be signed. It's not only more efficient to transport unencrypted signed

Re: pkg and https-based repo with self-signed cert

Hi! > >> How do I get pkg to accept a self-signed cert if the repo is running > >> under https ? > > man 3 fetch says > > > > export SSL_NO_VERIFY_PEER=1 To be more exact: cd /usr/local/etc/ cp pkg.conf.sample pkg.conf vi pkg.conf - PKG_ENV : { SSL_NO_VERIFY_PEER: 1 } -

Re: pkg and https-based repo with self-signed cert

> On 05 Feb 2015, at 21:52, Kurt Jaeger wrote: > > Hi! > > How do I get pkg to accept a self-signed cert if the repo is running > under https ? > > Thanks for any hints! > Hi Kurt, I wrote a blog post about that in 2013, which should still work for the most part (all patches required for

Re: pkg and https-based repo with self-signed cert

> On 05 Feb 2015, at 21:55, Kurt Jaeger wrote: > > Hi! > >> How do I get pkg to accept a self-signed cert if the repo is running >> under https ? >> >> Thanks for any hints! > > man 3 fetch says > > export SSL_NO_VERIFY_PEER=1 That will accept *any* cert, not certain if that's what you wa

Re: pkg and https-based repo with self-signed cert

Hi! > How do I get pkg to accept a self-signed cert if the repo is running > under https ? > > Thanks for any hints! man 3 fetch says export SSL_NO_VERIFY_PEER=1 should work. Tested, yes, it works. -- p...@opsec.eu+49 171 3101372 5 years to go ! __

pkg and https-based repo with self-signed cert

Hi! How do I get pkg to accept a self-signed cert if the repo is running under https ? Thanks for any hints! -- p...@opsec.eu+49 171 3101372 5 years to go ! ___ freebsd-ports@freebsd.org mailing list http://lists.fr