Hello,
our security department requested termination of http on mirror.karneval.cz (http is redirected to https) Can you please set mirror.karneval.cz as https only mirror?
Bellow is also update regarding other information. Mostly information are same.
Thanks.
Metadata Update from @arrfab: - Issue assigned to phsmoura - Issue tagged with: low-trouble, medium-gain, mirror-linux
Hi @karneval ,
As you can see in our wiki https://wiki.centos.org/HowTos/CreatePublicMirrors HTTPS is currently not used for mirrors and we suggest to not do this redirecting.
We can add your mirror, but we can't set as HTTPS only mirror. Can I proceed?
Metadata Update from @phsmoura: - Issue priority set to: Waiting on Reporter (was: Needs Review)
Thanks !
Your mirror http://mirror.karneval.cz/pub/linux/centos/ has been added to the mirrors DB
It will be listed as a public mirror (and on https://mirror-status.centos.org / https://www.centos.org/download/mirrors/ ) in the following minutes/hours. Your IP address[es] (89.102.0.150 2a02:8301:0:2::150) has/have been added in the ACL and so you should be able to rsync from msync.centos.org in the next ~10min
Important : it only concerns CentOS Linux 7 and Stream 8. For Stream 9 and above, read (again) https://wiki.centos.org/HowTos/CreatePublicMirrors
Mind that the HTTPS redirection may cause a timeout. Please contact us again if want to do any changes or disable your mirror.
Kind Regards
Metadata Update from @phsmoura: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
OK, there is applied exception that http://mirror.karneval.cz/pub/linux/centos/* is not redirected to https. Can you please also drop the previous version http://mirror.karneval.cz/pub/centos from the mirror list? Now is twice at mirror-status. See attached screenshot.
<img alt="cz.png" src="/centos-infra/issue/raw/files/d16af70a378304f135916310dc5f95fcd795cdb5d04f218815e2762941746ea0-cz.png" />
Metadata Update from @karneval: - Issue status updated to: Open (was: Closed)
Sure, your old mirror was disabled now
Unfortunately there is one pending issue. Mirror is sync for couple of days, but is not visible in the mirrorlist: http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=updates&cc=cz http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&cc=cz
Can you please check it?
Sorry it took me so long to fix it. There was a typo in the DB. Your mirror is now active and you can check it in those links.
Log in to comment on this ticket.