Custom Query (196 matches)

(Split out from #48.)

Currently lockername.scripts.mit.edu gives a certificate error on IE 6 and Safari. The problem is that (modulo the recent SNI extension) the HTTPS protocol doesn’t support sending the virtual host name before the server must decide which certificate to present. In #48, Joe installed SNI, which FF 2 and IE 7 understand.

To accomplish the highly desirable #17, we need to support these other browsers; many scripts users will not consider it acceptable that their viewers on IE 6 and Safari get certificate errors. To do this, we can move scripts.mit.edu to a separate IP from *.scripts.mit.edu, so that the server knows which certificate to present based on the IP.

When Apache is truly systemd'ified, we will be able to add the following:

For OpenAFS:

[Unit]
Before=httpd.service
[Install]
WantedBy=httpd.service

For Cron (needs a new patch):

[Unit]
Before=httpd.service
[Install]
WantedBy=httpd.service

Though, honestly, it may make more sense to roll our own Systemd service for afsagent.

This doesn't work right now because Apache is still SysV.

In parallel-find.pl, we should

• replace find -fprint with find -print, so it runs on my laptop
• for each file found, use fs la to check that scripts-security-upd still has write bits; if not, we can ignore the directory
• for each file found, tail -1 to find the version and spit that out with the filename.

Also, it should be in svn, so these changes can have a history.