discussions icon indicating copy to clipboard operation
discussions copied to clipboard

Published 20 hours ago • verified publisher icon ustclug

USTC Mirrors trusted CA & USTC Mirrors DNS

Open zhsj opened this issue 8 years ago • 3 comments

作用

  • 劫持相关域名 CNAME 到 mirrors.ustc.edu.cn
  • 对启用了 HTTPS 的域名由 USTC Mirrors trusted CA 签发
  • 打包 deb/rpm 方便用户一键安装 CA 和更改 DNS

计划

  • [ ] 建立 CA
  • [ ] 建立劫持 DNS
  • [ ] 打包发布

zhsj avatar Apr 11 '17 06:04 zhsj

DNS打算如何解决CDN亲和性问题呢？

gaoyifan avatar Apr 11 '17 07:04 gaoyifan

等我有时间把 https://github.com/zhsj/fdns 写好吧 == 也可以考虑在 dns 上加个基于用户 ip 的设置的页面，比如是否开启 mirrors 劫持，可以和防污染 dns 结合起来

zhsj avatar Apr 11 '17 07:04 zhsj

安装deb/rpm时触发更新hosts，或许会稍微简单一些？

gaoyifan avatar Apr 11 '17 08:04 gaoyifan