Thats pretty much what my NetSec came back with this morning. However I can't check it against another mirror. I need to be able to get the hashes directly from Cygwin. What is the url for the main repo? Where do all the formal mirrors rsync from?
-Chris On Wed, Sep 2, 2015 at 7:47 PM, Andrey Repin <anrdae...@yandex.ru> wrote: > Greetings, Chris Louden! > >> I'm currently searching the mailing list archive as well as google but >> I thought I would ask out right aw well.. I'm looking to implement a >> private Cygwin mirror. The process seem fairly straight forward >> setting up an apache instance and rsycing twice a day. However our >> NetSec folks have asked is there is any way I can sync the local repo >> via an authenticated or encrypted method. I guess to rule out a man in >> the middle scenario. If anyone has done anything similar I would >> appreciate the feedback. > > Probably. > You could get setup.ini from some secure source and check hashes of the > packages after sync. > I didn't check if there's any available, but supposedly there should be at > least one. > > > -- > With best regards, > Andrey Repin > Thursday, September 3, 2015 04:45:27 > > Sorry for my terrible english... > -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple