This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Re: setting up private mirror
- From: Chris Louden <chris dot louden at gmail dot com>
- To: cygwin at cygwin dot com
- Date: Thu, 3 Sep 2015 08:31:22 -0600
- Subject: Re: setting up private mirror
- Authentication-results: sourceware.org; auth=none
- References: <CAJGdTOAdWrXN7T06fPxDM=UXk59_02C4Nga9p12unv4-BqBepw at mail dot gmail dot com> <1077541053 dot 20150903044710 at yandex dot ru>
- Reply-to: chrislouden at gmail dot com
Thats pretty much what my NetSec came back with this morning. However
I can't check it against another mirror. I need to be able to get the
hashes directly from Cygwin. What is the url for the main repo? Where
do all the formal mirrors rsync from?
-Chris
On Wed, Sep 2, 2015 at 7:47 PM, Andrey Repin <anrdaemon@yandex.ru> wrote:
> Greetings, Chris Louden!
>
>> I'm currently searching the mailing list archive as well as google but
>> I thought I would ask out right aw well.. I'm looking to implement a
>> private Cygwin mirror. The process seem fairly straight forward
>> setting up an apache instance and rsycing twice a day. However our
>> NetSec folks have asked is there is any way I can sync the local repo
>> via an authenticated or encrypted method. I guess to rule out a man in
>> the middle scenario. If anyone has done anything similar I would
>> appreciate the feedback.
>
> Probably.
> You could get setup.ini from some secure source and check hashes of the
> packages after sync.
> I didn't check if there's any available, but supposedly there should be at
> least one.
>
>
> --
> With best regards,
> Andrey Repin
> Thursday, September 3, 2015 04:45:27
>
> Sorry for my terrible english...
>
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple