Secure installation

29 views
Skip to first unread message

Till Maas

unread,
May 4, 2020, 11:01:13 AM5/4/20
to weewx-development
Hi,

currently, http://weewx.com does not support HTTPS but only plain text
HTTP. The instructions on

http://weewx.com/docs/redhat.htm

describe to install a repo definition from

http://weewx.com/yum/weewx-el8.repo

that makes yum install packages from

http://weewx.com/yum/weewx/el8

without checking GPG signatures. This is rather insecure.

If you are interested, I can setup something at
https://copr.fedorainfracloud.org/

to provide signed weewx RPMS via HTTPS, there. It is a service that is
part of the Fedora project. I am also willing to help setting up HTTPS
for weewx.com using certificates for free from https://letsencrypt.org/

What do you think?

Thanks
Till
Reply all
Reply to author
Forward
0 new messages