You are not logged in.

#1 2017-11-23 16:39:02

tyzoid
Administrator
From: Ann Arbor, MI
Registered: 2017-06-17
Posts: 86

Mirror Pool

deep42thought recently set up a mirror pool: http://pool.mirror.archlinux32.org/

However, many hosts need to update their configurations to properly accept the new vhost.

These are confirmed to work:

  • 32.arlm.tyzoid.com

  • arch32.mirrors.simplysam.us

  • ind.mirror.archlinux32.org

  • jpn.mirror.archlinux32.org

  • mex.mirror.archlinux32.org

  • sgp.mirror.archlinux32.org

These are confirmed to not work:

  • archlinux32.vollzornbrot.de (apache default page)

These work, but need configuration changes:

Edit:
Updated to move arch32.mirrors.simplysam.us to the 'working' list.
Edited by deep42thought:
I moved even more mirrors up, removed mirror.archlinux32.org - it's not in the pool.

Last edited by tyzoid (2017-11-23 20:18:58)

Offline

#2 2017-11-23 19:48:27

user00265
Mirror Operator
From: Rushford, MN
Registered: 2017-07-06
Posts: 5
Website

Re: Mirror Pool

arch32.mirrors.simplysam.us has been updated to answer for pool.mirror.archlinux32.org. HTTPS will try to use cert for arch32.mirrors.simplysam.us

Offline

#3 2017-11-28 13:51:33

rewbycraft
Server Wrangler
From: Eindhoven, NL
Registered: 2017-06-19
Posts: 10
Website

Re: Mirror Pool

I think I fixed the configuration on archlinux32.mirror.roelf.org. Can somebody verify it works for them?

Offline

#4 2017-11-28 23:39:20

user00265
Mirror Operator
From: Rushford, MN
Registered: 2017-07-06
Posts: 5
Website

Re: Mirror Pool

rewbycraft wrote:

I think I fixed the configuration on archlinux32.mirror.roelf.org. Can somebody verify it works for them?

You still have HSTS enabled for that host, it'll force HTTPS.

Offline

#5 2017-11-29 00:09:48

rewbycraft
Server Wrangler
From: Eindhoven, NL
Registered: 2017-06-19
Posts: 10
Website

Re: Mirror Pool

I don't want to disable HSTS.
But it forcing https shouldn't be an issue I think, the certificates is valid.

Offline

#6 2018-01-25 21:51:29

ChaosEngine
Member
Registered: 2018-01-25
Posts: 1

Re: Mirror Pool

Offline

#7 2019-02-22 15:39:07

user00265
Mirror Operator
From: Rushford, MN
Registered: 2017-07-06
Posts: 5
Website

Re: Mirror Pool

There is a server whose SSL certificate is issued to serv.agoctrl.org answering with that certificate for pool.mirror.archlinux32.org, generating a CERT_COMMON_NAME_INVALID error.

Offline

#8 2019-03-07 08:28:49

deep42thought
Administrator
From: Jena, Germany
Registered: 2017-06-17
Posts: 617

Re: Mirror Pool

that's a design problem of pool.mirror.archlinux32.org:
this fqdn resolves to all (active) mirrors of ours, but there is (currently) no mechanism in place to distribute a valid certificate, so most mirrors simply show their default cert ...
we're open to suggestions smile

Offline

Board footer

Powered by FluxBB