CAcert System Admins discussion list

[Andre Klärner <kandre AT cacert.org>]

Hi Philipp,

On Tue 22.10.2013 00:44:22, Philipp Gühring wrote:
> My suggestion is to ask some trusted and competent members of the CAcert
> community to install and operate crl.cacert.org mirrors.
> 
> Some years ago, I envisioned, that we will have a problem with the
> bandwidth for the CRLs, so I migrated the CRLs from www.cacert.org to

I already thought, that someone envisioned something clever like this.

My idea would be to setup crl.cacert.org and www.cacert.org/crl so that
they 301 reroute to appropriate mirrors, which than can also be two
files hosted at any willing site.

The idea is quite easily copied from http.debian.net created by Raphael
Geissert. Maybe it would work out build a more minimalistic implementation
of it's idea for our purpose.

My implementation-design would be to host the two files on a server,
update them using rsync or wget -N, and on crl.cacert.org check maybe once
an hour if the delivered file is up to date (analogous wget -N). Than
redirect the clients with a 301 to one of the active mirror URLs, while
trying to distribute the traffic quite evenly.

I for my part would be happy to host a bit (5-10GB) of the crl-traffic on
my servers.

Regards, Andre

-- 
Andre Klärner
prospective CAcert Organisation Assurer

CAcert needs funding to keep its services running, so if you find our
project useful please consider donating. For more information see
http://www.cacert.org/index.php?id=13

CAcert braucht Geld um seine Dienste weiterhin betreiben zu können. Wenn
Sie also unser Projekt nützlich finden würden wir uns über eine Spende
freuen. Mehr Informationen finden Sie auf
http://www.cacert.org/index.php?id=13&lang=de_DE

Attachment: smime.p7s
Description: S/MIME cryptographic signature