TLS config for our site www.mojohaus.org

[Hervé Boutemy]

Hi,

see issue https://github.com/mojohaus/mojohaus.github.io/issues/23 opened by OWASP foundation.

To stay simple: does anybody have a simple way to have a valid certificate to just update the config and forget about it?

Regards,

Hervé

[Sergei Ivanov]

You can use cloudflare or netlify to front mojohaus website and provide https for free. 

--
Sergei

Sunday, 12 November 2017, 09:34 +0000 from herve....@gmail.com <herve....@gmail.com>:

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev...@googlegroups.com.
To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/129cff8a-c156-402b-91d0-4e40ce462bdb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Robert Munteanu]

Have you looked into https://letsencrypt.org/ ?

Robert

On Nov 12, 2017 15:17, "'Sergei Ivanov' via mojohaus-dev" <mojoha...@googlegroups.com> wrote:

You can use cloudflare or netlify to front mojohaus website and provide https for free. 

--
Sergei

Sunday, 12 November 2017, 09:34 +0000 from herve....@gmail.com <herve....@gmail.com>:

Hi,

see issue https://github.com/mojohaus/mojohaus.github.io/issues/23 opened by OWASP foundation.

To stay simple: does anybody have a simple way to have a valid certificate to just update the config and forget about it?

Regards,

Hervé

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev+unsubscribe@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/129cff8a-c156-402b-91d0-4e40ce462bdb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev+unsubscribe@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/1510492619.973783764%40f181.i.mail.ru.

[Sergei Ivanov]

AFAIK mojohaus.org is hosted on github pages.
And also AFAIK github pages hosting still does not support HTTPS on custom domains or letsencrypt.
There's a long running discussion on github related to this:
https://github.com/isaacs/github/issues/156 
Neither cloudflare nor netlify are ideal solutions, because they do not offer completely secure and trusted end-to-end communication with github pages. But at least from the end user's perspective, they will be seeing a secure site in their browser.
--
Sergei Ivanov

Воскресенье, 12 ноября 2017, 16:23 UTC от Robert Munteanu <robert....@gmail.com>:

Have you looked into https://letsencrypt.org/ ?

Robert

On Nov 12, 2017 15:17, "'Sergei Ivanov' via mojohaus-dev" <mojoha...@googlegroups.com> wrote:

You can use cloudflare or netlify to front mojohaus website and provide https for free. 

--
Sergei

Sunday, 12 November 2017, 09:34 +0000 from herve....@gmail.com <herve....@gmail.com>:

Hi,

see issue https://github.com/mojohaus/mojohaus.github.io/issues/23 opened by OWASP foundation.

To stay simple: does anybody have a simple way to have a valid certificate to just update the config and forget about it?

Regards,

Hervé

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev...@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/129cff8a-c156-402b-91d0-4e40ce462bdb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev...@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/1510492619.973783764%40f181.i.mail.ru.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev...@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/CAC8ULPYNaRbNFJ%2BBrmUsqFprNn%2BLjA0vyUvyVPQSof0kryUd%3Dw%40mail.gmail.com.

[Robert Munteanu]

On Mon, Nov 13, 2017 at 2:41 AM, 'Sergei Ivanov' via mojohaus-dev
<mojoha...@googlegroups.com> wrote:
> AFAIK mojohaus.org is hosted on github pages.

Ah, so letsencrypt will not work.

Thanks,

Robert

[Sandra Parsick]

But you could host your site on netlify completly and then using letencryp is possible.

Am Montag, 13. November 2017 01:41:35 UTC+1 schrieb Sergei Ivanov:

AFAIK mojohaus.org is hosted on github pages.
And also AFAIK github pages hosting still does not support HTTPS on custom domains or letsencrypt.
There's a long running discussion on github related to this:
https://github.com/isaacs/github/issues/156 
Neither cloudflare nor netlify are ideal solutions, because they do not offer completely secure and trusted end-to-end communication with github pages. But at least from the end user's perspective, they will be seeing a secure site in their browser.
--
Sergei Ivanov

Воскресенье, 12 ноября 2017, 16:23 UTC от Robert Munteanu <robert....@gmail.com>:

Have you looked into https://letsencrypt.org/ ?

Robert

On Nov 12, 2017 15:17, "'Sergei Ivanov' via mojohaus-dev" <mojoha...@googlegroups.com> wrote:

You can use cloudflare or netlify to front mojohaus website and provide https for free. 

--
Sergei

Sunday, 12 November 2017, 09:34 +0000 from herve....@gmail.com <herve....@gmail.com>:

Hi,

see issue https://github.com/mojohaus/mojohaus.github.io/issues/23 opened by OWASP foundation.

To stay simple: does anybody have a simple way to have a valid certificate to just update the config and forget about it?

Regards,

Hervé

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev+unsubscribe@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/129cff8a-c156-402b-91d0-4e40ce462bdb%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev+unsubscribe@googlegroups.com.

To post to this group, send email to mojoha...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/mojohaus-dev/1510492619.973783764%40f181.i.mail.ru.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "mojohaus-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to mojohaus-dev+unsubscribe@googlegroups.com.