Re: setting up private mirror

[Chris Louden <chris dot louden at gmail dot com>]

Thats pretty much what my NetSec came back with this morning. However
I can't check it against another mirror. I need to be able to get the
hashes directly from Cygwin. What is the url for the main repo? Where
do all the formal mirrors rsync from?

-Chris


On Wed, Sep 2, 2015 at 7:47 PM, Andrey Repin <anrdaemon@yandex.ru> wrote:
> Greetings, Chris Louden!
>
>> I'm currently searching the mailing list archive as well as google but
>> I thought I would ask out right aw well.. I'm looking to implement a
>> private Cygwin mirror. The process seem fairly straight forward
>> setting up an apache instance and rsycing twice a day. However our
>> NetSec folks have asked is there is any way I can sync the local repo
>> via an authenticated or encrypted method. I guess to rule out a man in
>> the middle scenario. If anyone has done anything similar I would
>> appreciate the feedback.
>
> Probably.
> You could get setup.ini from some secure source and check hashes of the
> packages after sync.
> I didn't check if there's any available, but supposedly there should be at
> least one.
>
>
> --
> With best regards,
> Andrey Repin
> Thursday, September 3, 2015 04:45:27
>
> Sorry for my terrible english...
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple