[imc-uk-tech] SSL .... even worse certificate problems

[Chris]

Hi

On Fri 29-Jul-2005 at 02:52:12PM +1200, Stewart wrote:
> Now when I go to https://www.indymedia.org.uk the
> certificate appears to be coming from www.famipow.org  .

Not all the mirrors serve the site on port 443 so that URI
shouldn't be used, this is why we don't list it in the
list of secure mirrors:

  http://www.indymedia.org.uk/#security

> I have no idea whether this is a mistake or a real
> attack. famipow.org is something to do with French
> libraries. As a Kiwi this makes me particularly jittery
> because the French government has previously carried out
> bombings on our soil.

You can work out which mirror it is by visiting them all
(and chanhing http:// to https://), the list is here:

  http://status.indymedia.org.uk/

> Can I get access to all the technical details of the
> setup?.....After sending this I'll subscribe to the list
> so that I can see better what's going on.

It's documented here:

  http://docs.indymedia.org/view/Local/UkMirror

And here:

  http://docs.indymedia.org/view/Local/UkCrypto#Web

> I'm wondering whether the publishing server itself can
> be distributed. Or more likely shouldn't it be a backend
> that nobody talks to directly. I should look at the
> technical details so I can comment more intelligently.

Well, this is a bit more complicated, Mir doesn't support
multiple publishing servers at the moment...

Chris

-- 
Aktivix -- Free Software for a Free World