This is the mail archive of the
mailing list for the Cygwin project.
Re: setting up private mirror
- From: Chris Louden <chris dot louden at gmail dot com>
- To: cygwin at cygwin dot com
- Date: Thu, 3 Sep 2015 08:31:22 -0600
- Subject: Re: setting up private mirror
- Authentication-results: sourceware.org; auth=none
- References: <CAJGdTOAdWrXN7T06fPxDM=UXk59_02C4Nga9p12unv4-BqBepw at mail dot gmail dot com> <1077541053 dot 20150903044710 at yandex dot ru>
- Reply-to: chrislouden at gmail dot com
Thats pretty much what my NetSec came back with this morning. However
I can't check it against another mirror. I need to be able to get the
hashes directly from Cygwin. What is the url for the main repo? Where
do all the formal mirrors rsync from?
On Wed, Sep 2, 2015 at 7:47 PM, Andrey Repin <email@example.com> wrote:
> Greetings, Chris Louden!
>> I'm currently searching the mailing list archive as well as google but
>> I thought I would ask out right aw well.. I'm looking to implement a
>> private Cygwin mirror. The process seem fairly straight forward
>> setting up an apache instance and rsycing twice a day. However our
>> NetSec folks have asked is there is any way I can sync the local repo
>> via an authenticated or encrypted method. I guess to rule out a man in
>> the middle scenario. If anyone has done anything similar I would
>> appreciate the feedback.
> You could get setup.ini from some secure source and check hashes of the
> packages after sync.
> I didn't check if there's any available, but supposedly there should be at
> least one.
> With best regards,
> Andrey Repin
> Thursday, September 3, 2015 04:45:27
> Sorry for my terrible english...
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple