[Dune] New SSL certificate for dune-project.org

[Steffen Müthing]

Just a quick follow-up: Here is a one-liner that takes care of all repositories under the current directory:

find . -name config | xargs sed -ie "s/http:\/\/git.dune-project.org/https:\/\/git.dune-project.org/g"

You might want to check the list of files returned by find before running this, just in case there are any other
files named config laying around…

If you are using a credentials cache, the next git operation will ask you once for your username and password
again because the cache considers the https server to be a different host.

Steffen

Am 14.08.2013 um 12:02 schrieb Steffen Müthing:

> Hi Markus,
> 
> Am 14.08.2013 um 11:56 schrieb Markus Blatt:
> 
>> Hi,
>> 
>> On Wed, Aug 14, 2013 at 11:38:23AM +0200, Steffen Müthing wrote:
>>> we finally have a working SSL setup on our server (a combination of fixing the configuration and getting a
>>> certificate signed by a well-known authority), so now you can use most of our services over HTTPS as well as
>>> HTTP.
>> 
>> Great! Thanks a lot.
>>> 
>>> There is one exception: The Git repositories are only available over HTTPS for authenticated access, i.e. for
>>> developers. We added this restriction to keep the server load down, and since there is nothing sensitive being
>>> transferred during anonymous Git access, it seems like a good tradeoff to us.
>>> On the other hand, if you are a developer with access rights, feel free to adjust your remote URLs to https. :-)
>> 
>> I fear I do not comprehend this. Does it mean I have to change the
>> URLs for HTTP authentication or is the authentication done via HTTPS
>> automaticaly?
> 
> AFAIK, you'll have to edit your remotes manually, either by "git remote set-url origin https://git.dune-project.org/...",
> or simply by editing .git/config (might be faster with a little sed one-liner). Maybe there's a clever trick to do that
> automatically, but I'm not aware of one (and adding a redirect on the server won't work, because that only kicks in
> after you have already sent your credentials).
> 
> So I'm afraid it's a one-off manual thing (or at least semi-manual if you use sed). :-(
> 
> Steffen
> 
>> 
>> Markus
>> -- 
>> Do you need more support with DUNE or HPC in general? 
>> 
>> Dr. Markus Blatt - HPC-Simulation-Software & Services http://www.dr-blatt.de
>> Hans-Bunte-Str. 8-10, 69123 Heidelberg, Germany
>> Tel.: +49 (0) 160 97590858  Fax: +49 (0)322 1108991658 
>> 
>> _______________________________________________
>> Dune mailing list
>> Dune at dune-project.org
>> http://lists.dune-project.org/mailman/listinfo/dune
> 
> _______________________________________________
> Dune mailing list
> Dune at dune-project.org
> http://lists.dune-project.org/mailman/listinfo/dune

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.dune-project.org/pipermail/dune/attachments/20130814/78d9ae10/attachment.sig>