Re: Important security noticed regarding release signing key

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Sep 21, 2015 at 3:50 PM, Wido den Hollander <wido@xxxxxxxx> wrote:
>
>
> On 21-09-15 15:05, SCHAER Frederic wrote:
>> Hi,
>>
>> Forgive the question if the answer is obvious... It's been more than "an hour or so" and eu.ceph.com apparently still hasn't been re-signed or at least what I checked wasn't :
>>
>> # rpm -qp --qf '%{RSAHEADER:pgpsig}' http://eu.ceph.com/rpm-hammer/el7/x86_64/ceph-0.94.3-0.el7.centos.x86_64.rpm
>> RSA/SHA1, Wed 26 Aug 2015 09:57:17 PM CEST, Key ID 7ebfdd5d17ed316d
>>
>> Should this repository/mirror be discarded and should we (in EU) switch to download.ceph.com ?
>
> I fixed eu.ceph.com by putting a Varnish HTTP cache in between which now
> links to ceph.com
>
> You can still use eu.ceph.com and should be able to do so.
>
> eu.ceph.com caches all traffic so that should be much snappier then
> downloading everything from download.ceph.com directly.
>

Thanks Wido for running this mirror/cache!

It's a pity though now that rsync'ing eu.ceph.com won't work. (And I
guess you should close eu.ceph.com's rsync doors now because it still
serves up the old packages).

Cheers, Dan
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com



[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux