[Savannah-cvs] [TlS]

[Beuc]

Currently we use our own TLS (https) certificates.
See '~/infra/CA.sh' (run with --help).

The root CA, and the children certificates for each websites, are renewed for 1 
year::

 mv ~/tls ~/tls.2006
 /infra/CA.sh createCA
 cp ~/tls.2006/demoCA/serial ~/tls/demoCA
 /infra/CA.sh renew
 /infra/CA.sh install

Meanwhile, one of us should go discuss with cacert.org so they don't
provide their software under a non-free license, then we could use
their certificates instead of our self-signed ones.
https://savannah.gnu.org/support/?104690

Jag once offered to go classical and get a certificate signed by an authority 
already present in web browser (as done with fsf.org).
It would be interesting to foster alternate web of trusts though, and use 
CAcert.

--
forwarded from 
https://savannah.gnu.org/maintenance/address@hidden://savannah.gnu.org/maintenance