Ad Widget

Collapse

Suggestion: Make repo.zabbix.com available over https

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • rbjorklin
    Junior Member
    • Apr 2016
    • 2

    #1

    Suggestion: Make repo.zabbix.com available over https

    It would ease my mind to be able to download the Zabbix packages over a secure connection. Could you please make repo.zabbix.com available over https?

    Bonus: Would be nice with checksums for the packages in a file in the repo.
  • kloczek
    Senior Member
    • Jun 2006
    • 1771

    #2
    As long as all served packages are signed you don't need to download them over https.
    http://uk.linkedin.com/pub/tomasz-k%...zko/6/940/430/
    https://kloczek.wordpress.com/
    zapish - Zabbix API SHell binding https://github.com/kloczek/zapish
    My zabbix templates https://github.com/kloczek/zabbix-templates

    Comment

    • rbjorklin
      Junior Member
      • Apr 2016
      • 2

      #3
      Originally posted by kloczek
      As long as all served packages are signed you don't need to download them over https.
      While this is true the keyfile used for verification is included in the package used to setup the repo and that could have been tampered with if it's not delivered over https. Cost should no longer be an argument for not using https since https://letsencrypt.org/ are providing free certificates.

      Comment

      • Alexei
        Founder, CEO
        Zabbix Certified Trainer
        Zabbix Certified SpecialistZabbix Certified Professional
        • Sep 2004
        • 5654

        #4
        We'll do it at some. Also we need to provide IPv6 for the repo.zabbix.com.
        Alexei Vladishev
        Creator of Zabbix, Product manager
        New York | Tokyo | Riga
        My Twitter

        Comment

        Working...