[Sks-devel] seeking peers for sks.pgp.plitc.eu

[Daniel DP. Plominski]

Hi Kristian

i have added all required records:

ServerName pool.sks-keyservers.net

ServerAlias eu.pool.sks-keyservers.net

ServerAlias ha.pool.sks-keyservers.net

ServerAlias ipv4.pool.sks-keyservers.net

ServerAlias ipv6.pool.sks-keyservers.net

ServerAlias p80.pool.sks-keyservers.net

ServerAlias hkps.pool.sks-keyservers.net

for VirtualHosts:

<VirtualHost *:80>

<VirtualHost *:443>

<VirtualHost *:11371>

# (for HKPS I have no certificate)

for keyserver.plitc.eu at:

85.10.206.227

2a01:4f8:a0:3343::2

dns requests should work

cheers,

Daniel

Am 29.12.2013 um 21:33 schrieb Kristian Fiskerstrand <address@hidden>:

Signierter PGP Teil

On 12/29/2013 08:32 PM, Daniel DP. Plominski wrote:

..


>>
>> Great ! Maybe you already did, but have you thought of this
>> aliases:
>>
>> ServerAlias pool.sks-keyservers.net eu.pool.sks-keyservers.net
>> ServerAlias ipv6.pool.sks-keyservers.net
>> ipv4.pool.sks-keyservers.net ServerAlias
>> ha.pool.sks-keyservers.net

For the sake of completeness; ALL traffic on 11371 should be passed
through to SKS. Otherwise CNAMEs such as keys.gnupg.net will fail). On
port 80 it should also allow the p80.pool.sks-keyservers.net if you
want it included there, and for 443 hkps.pool.sks-keyservers.net
should be allowed (but this also require a certificate for the pool,
that can be used with SNI for this alias)

--
----------------------------
Kristian Fiskerstrand
Blog: http://blog.sumptuouscapital.com
Twitter: @krifisk
----------------------------
Public PGP key 0xE3EDFAE3 at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
----------------------------
"Excellence is not a singular act but a habit. You are what you do
repeatedly."
(Shaquille O'Neal)

signature.asc
Description: Message signed with OpenPGP using GPGMail