[Pki-devel] Dogtag PKI Website URL

[Fraser Tweedale]

On Tue, Mar 27, 2018 at 09:52:22PM -0400, Endi Sukma Dewata wrote:
> ----- Original Message -----
> > On Tue, Mar 27, 2018 at 11:16:01AM -0400, Endi Sukma Dewata wrote:
> > > Hi,
> > > 
> > > The Dogtag PKI Website URL has changed as follows:
> > > 
> > > * Old URL: http://pki.fedoraproject.org
> > > * New URL: http://www.dogtagpki.org
> > > 
> > > Please use the new URL whenever possible. The old URL should
> > > automatically be redirected to the new URL, so all existing links
> > > should continue to work.
> > > 
> > > Unfortunately, there was a glitch during the transition yesterday
> > > causing it to be redirected to redhat.com. If you are experiencing
> > > this, you may need to clear the browser cache/history. Please refer
> > > to your browser's documentation since the steps are browser-specific.
> > > 
> > > Sorry for the inconvenience. Thanks!
> > > 
> > Thanks for the update, Endi.
> > 
> > Now that the domain change is done, what needs to be done to enable
> > TLS?
> > 
> > Thanks,
> > Fraser
> 
> I think Matt/Nathan is in the process of getting an SSL cert, unless
> there's an easy way to use Let's Encrypt?
> 

We should be able to use the ACME HTTP or DNS challenges to get a
certificate from Let's Encrypt.  Not sure which would be easiest to
get going (and automate) on OpenShift.  Here's a recently published
article on the official OpenShift blog about it:

    https://blog.openshift.com/lets-encrypt-acme-v2-api/

It's a shame OpenShift Online hasn't got automatic OOTB TLS support
via ACME/LE yet.  I have them a heads-up years ago.  We are behind
the competition.

Cheers,
Fraser