X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:reply-to:message-id:to:subject :in-reply-to:references:mime-version:content-type :content-transfer-encoding; q=dns; s=default; b=rOWseiBL/4dqvfNf g0KlBwE4vJptmH/1GoYb32Pc7Y2LU5FtYti3MvCotuN/ZH3kYuL+TEgFHpR4EUIM OIqpO5LFgAVonuX4q1n4l/1h9W/OlyvfKZ2NyiE3f0BxBd3ga0SmpqEDgvKNkBL+ 9ETd6AlmWb+h0xlEaZQ7dVsVKO4= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:date:from:reply-to:message-id:to:subject :in-reply-to:references:mime-version:content-type :content-transfer-encoding; s=default; bh=YdcpxnIUKoubEAKTMWDiaI DBZcI=; b=LJbV3hZ2NwFjTaRVV+ak448j/bcg0C2C8LsCSpLSRgY0H6bjd/y5CV S5viY1NHucunGtZVByyK0gsn0mQY18QeNYFBGnUn70hrddQ0o5SHglbrJrrjGkJC /Zz+QArFua3cmuPGCd5M/zKoOK9LV4CjKFW7M7iVWZbv0Jb14qWuI= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=4.8 required=5.0 tests=AWL,BAYES_80,FREEMAIL_FROM,KAM_THEBAT,SPF_SOFTFAIL autolearn=no version=3.3.2 X-HELO: smtp.ht-systems.ru Date: Thu, 3 Sep 2015 04:47:10 +0300 From: Andrey Repin Reply-To: cygwin AT cygwin DOT com Message-ID: <1077541053.20150903044710@yandex.ru> To: Chris Louden , cygwin AT cygwin DOT com Subject: Re: setting up private mirror In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Greetings, Chris Louden! > I'm currently searching the mailing list archive as well as google but > I thought I would ask out right aw well.. I'm looking to implement a > private Cygwin mirror. The process seem fairly straight forward > setting up an apache instance and rsycing twice a day. However our > NetSec folks have asked is there is any way I can sync the local repo > via an authenticated or encrypted method. I guess to rule out a man in > the middle scenario. If anyone has done anything similar I would > appreciate the feedback. Probably. You could get setup.ini from some secure source and check hashes of the packages after sync. I didn't check if there's any available, but supposedly there should be at least one. -- With best regards, Andrey Repin Thursday, September 3, 2015 04:45:27 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple