Dion Hulse 1:57 am on April 29, 2022
Tags: prio1 ( 49 ), ssl

SSL cert expired for plugins-svn.bbpress.org

The SSL cert being served up for https://plugins-svn.bbpress.org/ has expired, looks like it’s using an old copy of the *.bbpress.org cert, that was updated in r14643 for webs but there’s a duplicate copy of for svns (See r11954 & r11955)

#prio1 #ssl

Dion Hulse 2:20 am on November 6, 2020
Tags: prio3 ( 69 ), ssl

Can we please enable SSL for lists.wordpress.org?

Currently the domain isn’t accessible over SSLSSL Secure Socket Layer - Encryption from the server to the browser and back. Prevents prying eyes from seeing what you are sending between your browser and the server., and it’s not uncommon for links to be SSL’d or for browsers to force SSL.

ref: https://meta.trac.wordpress.org/ticket/629

#ssl #prio3

Dion Hulse 2:15 am on November 6, 2020
Tags: prio3 ( 69 ), ssl

Force SSL for https://planet.wordpress.org/ Can…

Force SSL for https://planet.wordpress.org/

Can we please enable forced SSL for https://planet.wordpress.org/ now that all the sites are SSL’d? Looks like the $maybe_force_ssl map just needs updating.

ref https://meta.trac.wordpress.org/ticket/634

#ssl #prio3

Dion Hulse 1:29 am on May 3, 2019
Tags: prio3 ( 69 ), ssl

Add SSL redirect to pingomatic.com

As per https://meta.trac.wordpress.org/ticket/4245 can we please enable a HTTP -> HTTPS redirect for pingomattic.com that keeps the REQUEST_URI intact?

#ssl #prio3

Dion Hulse 3:04 am on March 21, 2018
Tags: prio3 ( 69 ), ssl

Enable SSL for s.w.org on sandboxes?

Can we enable s.w.org for sandboxes? It would make debugging TracTrac Trac is the place where contributors create issues for bugs or feature requests much like GitHub.https://core.trac.wordpress.org/. and other resources in production easier if we could have the CDN hitting developer sandboxes instead.

As far as I can tell, The only thing that needs doing is adding the *.w.org cert to the s.w.org hostname.

Right now when sandboxing s.w.org the process requires you to load a resource, approve the invalid cert, reload the other page, and then rinse-repeat when the browser starts rejecting the cert again randomly.

#ssl #prio3

Dion Hulse 4:14 am on December 5, 2016
Tags: prio3 ( 69 ), ssl

SSL for wp.org

As wp.org is now a WordPress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. https://wordpress.org/ domain, can we please get SSLSSL Secure Socket Layer - Encryption from the server to the browser and back. Prevents prying eyes from seeing what you are sending between your browser and the server. enabled for it?

ref https://wordpress.slack.com/archives/meta/p1480801420000002 / https://wordpress.slack.com/archives/meta/p1480909161000077

#ssl #prio3

Dominik Schilling 9:17 pm on January 26, 2016
Tags: ssl

Hey is there a reason why we have…

Hey, is there a reason why we have a 302 redirect for http://wordpress.org to https://wordpress.org?

➜  ~  curl -I http://wordpress.org
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 26 Jan 2016 21:15:27 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://wordpress.org/
X-Frame-Options: SAMEORIGIN

➜  ~  curl -I http://make.wordpress.org
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Jan 2016 21:15:37 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Olaf: ⛄
Location: https://make.wordpress.org/
X-Frame-Options: SAMEORIGIN

➜  ~  curl -I http://developer.wordpress.org
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 26 Jan 2016 21:15:45 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Olaf: ⛄
Location: https://developer.wordpress.org/
X-Frame-Options: SAMEORIGIN

Is this something which can be fixed?

Meta ticket: https://meta.trac.wordpress.org/ticket/755

#ssl

Konstantin Kovshenin 11:08 am on January 4, 2016
Tags: ssl, wordcamp.org ( 30 )

Hi We’re ready to start converting the second…

Hi! We’re ready to start converting the second batch of WordCampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more. domains to the correct URLURL A specific web address of a website or web page on the Internet, such as a website’s URL www.wordpress.org structure. Can we install the certificate and the nginxNGINX NGINX is open source software for web serving, reverse proxying, caching, load balancing, media streaming, and more. It started out as a web server designed for maximum performance and stability. In addition to its HTTP server capabilities, NGINX can also function as a proxy server for email (IMAP, POP3, and SMTP) and a reverse proxy and load balancer for HTTP, TCP, and UDP servers. https://www.nginx.com/. config on the WordCamp.org server please?

/home/wordcamp/letsencrypt/output/batch-2.crt
/home/wordcamp/letsencrypt/output/batch-2.key
/home/wordcamp/letsencrypt/output/batch-2.nginx.conf

The paths in the nginx config might need to be adjusted depending on where you put it. Also @barry mentioned we should probably use maps in the nginx configs for this, so I’ll be reworking the LE script a bit, maybe before the next batch.

Thank you!

#ssl, #wordcamp-org

Konstantin Kovshenin 7:09 pm on December 17, 2015
Tags: ssl, wordcamp.org ( 30 )

Hello again I need a couple of changes…

Hello again! I need a couple of changes on WordCamp.org to move forward with the Let’s Encrypt stuff:

An include of /home/wordcampWordCamp WordCamps are casual, locally-organized conferences covering everything related to WordPress. They're one of the places where the WordPress community comes together to teach one another what they’ve learned throughout the year and share the joy. Learn more./letsencrypt/output/*.nginx.conf in the httpHTTP HTTP is an acronym for Hyper Text Transfer Protocol. HTTP is the underlying protocol used by the World Wide Web and this protocol defines how messages are formatted and transmitted, and what actions Web servers and browsers should take in response to various commands. context. These files will be generated dynamically, each will have a server blockBlock Block is the abstract term used to describe units of markup that, composed together, form the content or layout of a webpage using the WordPress editor. The idea combines concepts of what in the past may have achieved with shortcodes, custom HTML, and embed discovery into a single consistent API and user experience. listening on 443 with one or more domains, paths to the SSLSSL Secure Socket Layer - Encryption from the server to the browser and back. Prevents prying eyes from seeing what you are sending between your browser and the server. certs and an include of camps-common.
Privileges to reload the nginxNGINX NGINX is open source software for web serving, reverse proxying, caching, load balancing, media streaming, and more. It started out as a web server designed for maximum performance and stability. In addition to its HTTP server capabilities, NGINX can also function as a proxy server for email (IMAP, POP3, and SMTP) and a reverse proxy and load balancer for HTTP, TCP, and UDP servers. https://www.nginx.com/. server.