Hi all, We've been offering HTTPS access for a long time: https://mirrors.ustc.edu.cn/opensuse/ Another mirror site I know which offers stable HTTPS service: https://mirrors.tuna.tsinghua.edu.cn/opensuse/ Thanks, Boyuan Yang 在 2017年10月10日星期二 CST 下午1:30:10，ariel sabiguero yawelak 写道：
Hi.
Our mirror started serving https since... a few minutes :-)
https://espejito.fder.edu.uy/opensuse/
We plan to offer http also. Please let us know about any problem, misconfiguration or recommendation.
best regards.
ariel
El 10/10/17 a las 09:19, Marcus Meissner escribió:
Hi folks,
We are currently working on more https enablement for the openSUSE download tooling.
Background is that safe repository usage is possible for the main and update repositories, but not for the rest buildservice repositories, which have unknown keys.
software.opensuse.org and download.opensuse.org can provide https URLs already.
The problem we are facing is that download.opensuse.org redirects from HTTPS to HTTP, which is caught by various clients as a security violation.
So to avoid making clients less secure, we would like to know if some of you can offer https serving mirrors of openSUSE.
With the availability of letsencrypt this can even be done without any additional costs. A low footprint client for letsencrypt is dehydrated (https://github.com/lukas2511/dehydrated), which can also be obtained as packages for openSUSE, SLES, CentOS and RHEL from https://software.opensuse.org/download.html?project=security:dehydrated&p ackage=dehydrated.
Ciao, Marcus