From owner-freebsd-questions@FreeBSD.ORG Thu May 8 06:26:56 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BD0AEBD7 for ; Thu, 8 May 2014 06:26:56 +0000 (UTC) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "smtp.infracaninophile.co.uk", Issuer "ca.infracaninophile.co.uk" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 655231C6 for ; Thu, 8 May 2014 06:26:56 +0000 (UTC) Received: from seedling.black-earth.co.uk (seedling.black-earth.co.uk [81.2.117.99]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.8/8.14.8) with ESMTP id s486QpY2048990 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO) for ; Thu, 8 May 2014 07:26:51 +0100 (BST) (envelope-from m.seaman@infracaninophile.co.uk) Authentication-Results: lucid-nonsense.infracaninophile.co.uk; dmarc=none header.from=infracaninophile.co.uk DKIM-Filter: OpenDKIM Filter v2.8.3 smtp.infracaninophile.co.uk s486QpY2048990 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=infracaninophile.co.uk; s=201001-infracaninophile; t=1399530411; bh=SMyZwXTnf5dOqFhFhEytroqJ5e0lWEknXrlN+eK31VY=; h=Date:From:To:Subject:References:In-Reply-To; z=Date:=20Thu,=2008=20May=202014=2007:26:50=20+0100|From:=20Matthew =20Seaman=20|To:=20freebsd-questi ons@freebsd.org|Subject:=20Re:=20svn=20https=20access|References:= 20=20<536B22D2.3060503@infracaninophile.co.uk>|In-Reply-To:=20<5 36B22D2.3060503@infracaninophile.co.uk>; b=cUKqsNnZiA3O5y2Ap+yJ93jC4MxKOTBH4hS3BYncoRRa44PVrt+7RvWg06TKISYbW SMdOojCo4F1ze3P3qcp1Pm6X5EDplR3LNjT9+9ZJhBtfKSl73Qaz9Us1BMhmE1G8Tb nM9JIkEgnzJeFXVBzJ1HqbwOSg9g262SWGdEcHRo= Message-ID: <536B23AA.2030407@infracaninophile.co.uk> Date: Thu, 08 May 2014 07:26:50 +0100 From: Matthew Seaman User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: svn https access References: <536B22D2.3060503@infracaninophile.co.uk> In-Reply-To: <536B22D2.3060503@infracaninophile.co.uk> X-Enigmail-Version: 1.6 OpenPGP: id=E7F39EBF Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="3Sn2Xsd3LCwtcOtI7jVOmkfIx8eSNmUco" X-Virus-Scanned: clamav-milter 0.98.1 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU autolearn=ham autolearn_force=no version=3.4.0 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 May 2014 06:26:56 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --3Sn2Xsd3LCwtcOtI7jVOmkfIx8eSNmUco Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 08/05/2014 07:23, Matthew Seaman wrote: > However I can't seem to find any TLSA records associated with > 'svn.freebsd.org' or 'svn0.us-east.freebsd.org' [*] or > 'svnmir.nyi.freebsd.org'. D'Oh! I typoed. The TLSA record is there: % dig +short TLSA _443._tcp.svn0.us-east.freebsd.org 3 0 1 4735A909A3ABFA20333643C51AD6E6FBEBC0C08337D4469CA0AB897F C29C4CA3 Working out whether that matches the cert I'll leave as an exercise for the student. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. PGP: http://www.infracaninophile.co.uk/pgpkey JID: matthew@infracaninophile.co.uk --3Sn2Xsd3LCwtcOtI7jVOmkfIx8eSNmUco Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQJ8BAEBCgBmBQJTayOrXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ2NTNBNjhCOTEzQTRFNkNGM0UxRTEzMjZC QjIzQUY1MThFMUE0MDEzAAoJELsjr1GOGkATQrQQAIp5KR7o72C5KLK0FxeZnqnE PRKJQpQqC8QIwuzTnl7CHXMP6l8vL8a/oLtpnxlpPucdwe8Jj2/Mxi7DQM6t1U2p w7KFMmmqb64ShtKVC/b1KP+/Rc7E1cVLoX/TcuUFD8UjFGwJsJ1OQqjCNWTA10k3 KMue1jNprG8TpyCEhm3SADvv0Ev1NMQEWxq/0sdfgV8l43ekdLUa3SfGaSgHznw0 CtPghFIa+eHbZSE/POMVKoKzNyaTf1tFtGaKINm/s0kH4iMiWV+h2lJ2pLj53Pd8 qPi79x9pcy/h+QE+3A3pfcBx6M97WXkPpr9IStmxUm64eA4MyzaymtwV4/e7tVbw TOKl8XywyJjSN/o08tAh1gpU1pKexWimKlKmadB2rqBw+ov7VgqykvEKmofEn+E/ 7tE3xxT38b1hGB0bki/+8DU5lB7Ub4mfk7lB00WkW6dYGD1/g9FnoicL+DNsPFxO e7c7E2xXDm4ikv1GoUAyZ4Yw0Xm5PFHbLH8e9Gz6bQTJfg6I08LlkMnwroM+wLpS jiY5vsXyqJAnqOtCdLT5szRrGNAmueCO5NrJkF7YX48+est1jMGUcRFyr7vx2uM2 /lShiUWSrdjHcpBIKrTdbhK5H/w1ga5iVde9OtWQB2wEc13GrwwHQLS6WWOFLzEQ GNZ+h7mSBgxiwFN3poZm =iF0A -----END PGP SIGNATURE----- --3Sn2Xsd3LCwtcOtI7jVOmkfIx8eSNmUco--