[Sks-devel] Status flags are red

2013-10-28 Thread Kiss Gabor (Bitman)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dear Kristian, What should I do in order to change another red box to green on page http://sks-keyservers.net/status/ line keys.niif.hu? :-) The latest development was the reverse proxy on port 11371. It is okay now. Port 80 and hkps access are alrea

Re: [Sks-devel] Status flags are red

2013-10-28 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/28/2013 05:26 PM, Kiss Gabor (Bitman) wrote: > Dear Kristian, > Hi Gabor > What should I do in order to change another red box to green on > page http://sks-keyservers.net/status/ line keys.niif.hu? :-) > > The latest development was the

Re: [Sks-devel] Status flags are red

2013-10-28 Thread Kiss Gabor (Bitman)
> > allow one red flag. :-) However I don't understand port 80 red > > sign. > > Virtualhost-related, no match found > > kristianf@kflaptop ~ $ curl -H'Host: p80.pool.sks-keyservers.net' > "http://keys.niif.hu/pks/lookup?op=stats"; > > > 404 Not Found D'oh! Fixed. Thanks. :-) > something like

Re: [Sks-devel] Status flags are red

2013-10-28 Thread Jeremy T. Bouse
On 28.10.2013 12:32, Kristian Fiskerstrand wrote: On 10/28/2013 05:26 PM, Kiss Gabor (Bitman) wrote: BTW. A suggestion: yellow color could mean: SSL works but CA is other than expected. Red simply means that it is not considered for the pool, it is not in itself a status of success on the ser

Re: [Sks-devel] Status flags are red

2013-10-29 Thread Daniel Kahn Gillmor
On 10/28/2013 08:22 PM, Jeremy T. Bouse wrote: I use StartCom for my SSL CA provider and they allow SANs to be added for SNI. I don't think that startcom is an appropriate CA for the current hkps.pool.sks-keyservers.net. In the current setup, anyone who has configured "keyserver hkps://hkps.