[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Sks-devel] Status flags are red
|
From: |
Kristian Fiskerstrand |
|
Subject: |
Re: [Sks-devel] Status flags are red |
|
Date: |
Mon, 28 Oct 2013 17:32:21 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0 |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 10/28/2013 05:26 PM, Kiss Gabor (Bitman) wrote:
> Dear Kristian,
>
Hi Gabor
> What should I do in order to change another red box to green on
> page http://sks-keyservers.net/status/ line keys.niif.hu? :-)
>
> The latest development was the reverse proxy on port 11371. It is
> okay now. Port 80 and hkps access are already configured since
> weeks. (Note: SSL cert is signed by other CA than yours. So I may
> allow one red flag. :-) However I don't understand port 80 red
> sign.
Virtualhost-related, no match found
address@hidden ~ $ curl -H'Host: p80.pool.sks-keyservers.net'
"http://keys.niif.hu/pks/lookup?op=stats";
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /pks/lookup was not found on this server.</p>
<hr>
<address>Apache/2.2.16 (Debian) Server at p80.pool.sks-keyservers.net
Port 80</address>
</body></html>
>
> Any help will be appreciated.
>
> BTW. A suggestion: yellow color could mean: SSL works but CA is
> other than expected.
Red simply means that it is not considered for the pool, it is not in
itself a status of success on the server. That said, I'll consider
something like that. FWIW, you can use different certs for different
hostnames using SNI, there are a few other servers like that in the
pool, only offering the HKPS CA signed cert upon
hkps.pool.sks-keyservers.net
- --
- ----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
- ----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
- ----------------------------
Ab esse ad posse
- From being to knowing
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.0-beta255 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIcBAEBCAAGBQJSbpGVAAoJEAt/i2Dj7frj8QgP/jV3qmPgKpezdb3dN0eZOu2r
SRTdvLAM9yXL3NlTIvYo8DBlgCf0x471n2WsQfjGoKCAJ1aVVQI9+1vckLn3DHoL
7t9T6/+hGPCCVoJXveWdVAn9EFnsxlCjA2PtMoCOm8tdVhIJ+vZBzts73d49eI+/
WfPaG5h5nYk7pgQXnDE0YNWVr4kARhCCtKbrWRm2earllkuiW4f5pKSGjbzCBmO9
GI06XPq5Np1DQ0jjefxUtY1TrG1u1KT4niOFUoGOmKFRT1C2s+BHP+T8D4hJ8FNW
biMG6Hw0c2uvRSwM2YpQKGZGT8nnqNxG7KxUu8B3mqMgAKB2PNvK6q4aQuR2UYB0
baQzZ/iLxp2K3RhN9h5khZVobzMU4VDSww0zQ1eQQ4X/4Dp+R3vXj84Wv12R5rFP
dVZnT9iRfBNICYlex1ZD5w7kMaFCUkOTVvVeBPRLwUQiY4LBk2pHt4+07r/QDuBo
A9T/CrsdlO/9jeu+UIPEs3DIZAqnXfND9X/uocICki67PJMgJohN6B3xFU0JxiU9
Tx3D2SxTzAqdTpcklJPbWM9H8VjGFN7TD4Ch4/Bgk5R/36cu1CNc0x3/d05bpjtl
BPj6xKpQKTh7T7iZr0/zrInkAPHmTNBUBnI+rtHvic0UFt5OWnCuaAb4or8SMa3F
0TT+cJjoFKdJGPCXqH/Q
=jaik
-----END PGP SIGNATURE-----