summaryrefslogtreecommitdiff
path: root/certs
Commit message (Collapse)AuthorAgeFilesLines
* certs: Add startcom CA chain certificatePedro Alvarez2015-11-111-0/+78
| | | | | | | | These are public and can be downloaded from https://www.startssl.com/certs/ - https://www.startssl.com/certs/sub.class2.server.ca.pem - https://www.startssl.com/certs/ca.pem Change-Id: Ia2e1c2702fbd48f0f3bdd37dfc6044c5d0a94875
* Use HTTPS for all infrastructure.Sam Thursfield2015-03-301-0/+118
This is implemented with the HAProxy frontend doing 'SSL termination'. So internal traffic between the frontend_haproxy instance and the various machines serving content is unencrypted HTTP as before, but all traffic that goes over the public internet is encrypted now. Note that storyboard.baserock.org is not behind HAProxy, and currently uses a different, self-signed certificate. Change-Id: I9140def605fe26c9c613066fa6524e3cf817f97c