RSSAmplifier

Blog

Release notes from moshpit-proxy

github.comRSS feed ↗2 posts

Latest posts

v0.2.0 — the visitor side just works

The visitor side works without special knowledge. v0.1.0 shipped the mechanism; this is the release where following the README is enough. The proxy was refusing every site — correctly It relayed through pit.moshcode.sh:443 , which only works if the gateway passes TLS through by SNI. It terminates instead, so every name presented the gateway's own certificate: refuse alt.2600: key mismatch,…

v0.1.0 — a name serves itself

First release. A Moshpit name now goes from "pointed in the dashboard" to "serving over TLS" without anyone touching the box. The problem this solves No CA will issue a certificate for .hacker , .rank or .2600 — the CA/Browser Forum stopped issuing for endings outside the DNS root in 2015. So a Moshpit site is either plaintext, or it presents a certificate every browser rejects. The answer here is…