> In this case question - can CloudFront be configured to use a non "AWS SSL > Certificate"?
Sure this is possible, you can import your own certificates in AWS certificate manager, which is used by CloudFront. But which certificate would you use for this that does not require regular rotation like let’s encrypt? Therefore I only see two options: a) We host the update site. For this we also need to host the eclemma.com <http://eclemma.com/> DNS Zone so AWS certificate manager can do all the magic automatically for us. b) Eclipse foundation hosts the site and manages the certificates Maybe we just ask Eclipse IT what would be their preferred solution. Cheers, -marc . > On 8. Jun 2023, at 16:48, Evgeny Mandrikov <mandri...@gmail.com> wrote: > > > On Wednesday, June 7, 2023 at 7:27:09 PM UTC+2 Marc R. Hoffmann wrote: > setting up SSL termination on AWS with Cloudfront would be quite eays, I run > a couple of sites with this setup. But to issue the AWS SSL Certificate we > need to host the domain in our own Route53 Zone. > > Why? My best guess - the use of "AWS SSL Certificate" (SSL Certificate issues > and managed by AWS) requires Route53. In this case question - can CloudFront > be configured to use a non "AWS SSL Certificate"? > > Do you think Eclipse foundation would allow us to host the DNS Zone for > eclemma.org <http://eclemma.org/> ourself? > > I'm not sure. > > Recall that during the transfer of the project to Eclipse Foundation, you > transferred ownership of eclemma.org domain to Eclipse Foundation at the same > time as registration of Eclipse EclEmma trademark - > https://www.eclipse.org/legal/trademarks.php > I think these two are tied together, i.e. Eclipse Foundation should own the > domain as well as the trademark to be able to provide some guarantees about > the future of hosted projects to consumers, i.e. to be able to easily > provide/replace project functionality/service/etc in case if current > maintainers disappear. > > On the other hand > https://www.eclipse.org/projects/handbook/#resources-external > states > > Project teams may use services that are not hosted by the Eclipse Foundation > ... > The following rules apply: ... One or more project committers must have > ownership rights ... > External resources can be used for: ... alternative sources for downloads ... > > So maybe > Eclipse Foundation can hold domain ownership, while DNS can be hosted by us, > or maybe we can host at least update.eclemma.org? > > The other option is that Eclipse.org <http://eclipse.org/> would provide > update.eclemma.org <http://update.eclemma.org/> hosting for us. > > There is already https://download.eclipse.org/eclemma/ > So probably they can do a redirect from updates.eclemma.org to > download.eclipse.org, for example to download.eclipse.org/eclemma/releases > However should be noted that AFAIR we continued with the use of S3 for > updates.eclemma.org because a long time ago download.eclipse.org had a quite > high rate of unavailability. > > All in all: > I don't think that I'm the best person to answer these your questions. And I > think we'd better get in touch with Eclipse Foundation - I'm pretty sure > together we'll find the best solution. > As you're the owner of S3 bucket and can configure CloudFront if will be > needed, then may I ask you to initiate this discussion by describing the > situation and our current ideas/thoughts? I think this can be done via > https://gitlab.eclipse.org/eclipsefdn/helpdesk > > > Regards, > Evgeny > > > -- > You received this message because you are subscribed to the Google Groups > "JaCoCo and EclEmma Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jacoco+unsubscr...@googlegroups.com > <mailto:jacoco+unsubscr...@googlegroups.com>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jacoco/f3166cc6-1e50-4847-918d-3e1d81c449c3n%40googlegroups.com > > <https://groups.google.com/d/msgid/jacoco/f3166cc6-1e50-4847-918d-3e1d81c449c3n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "JaCoCo and EclEmma Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jacoco+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jacoco/0D60A71A-F2DA-4218-B85A-2A4E1A0C3F66%40mountainminds.com.
