[Gpg4win-users-en] Commonly accepted SSL/TLS certificate for gpg4win websites

[Thomas Arendsen Hein]

* Werner Koch <wk at gnupg.org> [20151029 16:01]:
> On Tue, 27 Oct 2015 15:32, thomas at intevation.de said:
> 
> > That are very good prices, if you can buy the 10-SAN certificate, I
> > can immediately deploy it on the download server. If I understand
> 
> I just ordered them.  I'll send you the key and the certificate by PM.

Thank you, they arrived today.

Installing the certificate will cause a tiny downtime, I assume
that is no problem.

But as I wrote earlier, I want to do a major system upgrade to
provide support for TLS1.2. Can I do it spontaneous or should we
plan and announce a certain day for it?

> > SAN entries should be:
> 
> >   files.gpg4win.de
> >   lists.gpg4win.de
> 
> I don't think they make sense.  We do not have translated content on files
> and thus it is better to redirect plain http access to https://*.org (in
> case there are bookmarked http:// URLs).  I can do the redirection for
> if you like.

OK, I just included them because there were essentially free.
I'll add the redirects on our server, no need to do it on your side.

> There are 2 free slots remaining which I can add at any time later.

Oh, that's nice. With GeoTrust this would require buying a new
certificate.

Regards,
Thomas

-- 
thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A
Intevation GmbH, Neuer Graben 17, 49074 Osnabrueck - AG Osnabrueck, HR B 18998
Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner