Re: Important security noticed regarding release signing key

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 21-09-15 15:57, Dan van der Ster wrote:
> On Mon, Sep 21, 2015 at 3:50 PM, Wido den Hollander <wido@xxxxxxxx> wrote:
>>
>>
>> On 21-09-15 15:05, SCHAER Frederic wrote:
>>> Hi,
>>>
>>> Forgive the question if the answer is obvious... It's been more than "an hour or so" and eu.ceph.com apparently still hasn't been re-signed or at least what I checked wasn't :
>>>
>>> # rpm -qp --qf '%{RSAHEADER:pgpsig}' http://eu.ceph.com/rpm-hammer/el7/x86_64/ceph-0.94.3-0.el7.centos.x86_64.rpm
>>> RSA/SHA1, Wed 26 Aug 2015 09:57:17 PM CEST, Key ID 7ebfdd5d17ed316d
>>>
>>> Should this repository/mirror be discarded and should we (in EU) switch to download.ceph.com ?
>>
>> I fixed eu.ceph.com by putting a Varnish HTTP cache in between which now
>> links to ceph.com
>>
>> You can still use eu.ceph.com and should be able to do so.
>>
>> eu.ceph.com caches all traffic so that should be much snappier then
>> downloading everything from download.ceph.com directly.
>>
> 
> Thanks Wido for running this mirror/cache!
> 

You're welcome!

> It's a pity though now that rsync'ing eu.ceph.com won't work. (And I
> guess you should close eu.ceph.com's rsync doors now because it still
> serves up the old packages).

I just did. It's only serving HTTP now. The active data should all be in
cache now, so downloads should be fast.

I personally love Varnish, great reverse HTTP proxy.

Wido

> 
> Cheers, Dan
> 
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com



[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux