On 2013/08/16 05:22, Juan Francisco Cantero Hurtado wrote: > On Sun, Aug 11, 2013 at 01:22:24PM +0100, Stuart Henderson wrote: > > On 2013/08/10 22:22, Juan Francisco Cantero Hurtado wrote: > > > Here is a partial diff with some MASTER_SITES changed from http to > > > https. Checksums and http response (ie, only 200, no redirections) have > > > been checked for each new https url. Thanks to espie, sthen and naddy > > > for the help. > > > > > > Please review and commit: > > > http://juanfra.info/bl/openbsd-https-201308/full.1.patch > > > > > > Log of "make checksum": > > > http://juanfra.info/bl/openbsd-https-201308/checksum.1.log (ignore the > > > last error) > > > > > > > Please don't do the spacehopper.org ones. > > > > OK. > > Full patch: > http://juanfra.info/bl/openbsd-https-201308/full.2.patch > > Logs of "make checksum": > http://juanfra.info/bl/openbsd-https-201308/checksum.2.log > http://juanfra.info/bl/openbsd-https-201308/checksum.3.log > http://juanfra.info/bl/openbsd-https-201308/checksum.4.log > http://juanfra.info/bl/openbsd-https-201308/checksum.5.log > > -- > Juan Francisco Cantero Hurtado http://juanfra.info >
Hmm.. I've tried a random sample of these and it's not looking too promising SSL-wise. A couple were OK but, for example...: https://www.oberhumer.com/ - expired certificate https://www.kde-apps.org/ - cert has wrong domain (*.opendesktop.org) https://pkgs.fedoraproject.org/ - signed by Fedora CA, not in usual browsers or cert.pem https://mpdbrowser.tuxfamily.org/ - can't validate, self-signed https://people.freedesktop.org/ - cert has wrong domain (secure.freedesktop.org) https://computeremuzone.com/ - cert has wrong domain (*.powweb.com) https://leva.ecentrum.hu/ - can't validate, self-signed
