sks-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Sks-devel] HKPS + ssl + nginx


From: Mike Forbes
Subject: [Sks-devel] HKPS + ssl + nginx
Date: Fri, 31 Jul 2015 11:05:15 +1200
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.0

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

We've managed to get an HKPS cert from Kristian (thanks!)

So now begins the task of trying to make HKPS and SSL and SKS all work
together.

Currently we're serving up our main pgp pages with our own SSL cert
(https://pgp.net.nz)

If we were to serve this using the HKPS cert I imagine it would throw
a certificate warning for most people who haven't imported the
hkps.pool.sks-keyservers.net CA.

My question is, how have other people managed to get HKPS working
together with their own SSL certs?

Our nginx config pushes all requests on port 80 to 443, then has a
location section for /pks that points to the locally running sks
daemon on 127.0.0.1:11371

I'd love to hear how others have managed this.


Cheers,
- -- 
Mike Forbes
System Administrator

NZRS Ltd.
M +64 21 999 416
P +64 4 555 0125

PGP: A2BB DF0B 311C 3C8F E1D7  5EEB DA03 46C0 D68F BF2E
-----BEGIN PGP SIGNATURE-----
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=
=+yat
-----END PGP SIGNATURE-----



reply via email to

[Prev in Thread] Current Thread [Next in Thread]