[SAC] [OSGeo] #2521: Change secure to use dedicated cert and set up script to copy the cert

OSGeo trac_osgeo at osgeo.org
Wed Oct 21 10:54:40 PDT 2020


#2521: Change secure to use dedicated cert and set up script to copy the cert
---------------------------+-----------------------
 Reporter:  robe           |      Owner:  sac@…
     Type:  task           |     Status:  new
 Priority:  normal         |  Milestone:  Unplanned
Component:  Systems Admin  |   Keywords:
---------------------------+-----------------------
 secure right now is using a letsencrypt wildcard cert which I never got
 around to changing to a ldap.osgeo.org cert.  So I've been renewing it
 every 3 months which is not ideal.

 My proposed:

 Change to use ldap.osgeo.org
 Setup a script on nginx that when it renews it copies the script to secure
 container.

 I do have a script already that copies the cert but it can be improved to
 not require manual stuff.  Something a savyor network admin like strk can
 do inhis sleep.

 I have what I am currently doing outlined here

 https://git.osgeo.org/gitea/sac/osgeo7/wiki/NGinx-Proxy-container#user-
 content-generating-wildcard-cert-for-osgeo-org

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2521>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.


More information about the Sac mailing list