Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
OpenStreetMap Certificate 2015
The OpenStreetMap Operations team are looking for a new certificate authority for the project.
Requirements:
* Supported by Java 7+ out-the-box
* Widely trusted (Web + Mobile) by default
* Ability to re-issue certificates if required
Ideally:
* Expiry 2y+
Bonus:
* Open Source friendly
Certificate 1:
openstreetmap.org, *.openstreetmap.org, osm.org, *.osm.org, openstreetmap.com, *.openstreetmap.com, openstreetmap.net, *.openstreetmap.net, openstreetmaps.org, *.openstreetmaps.org, osm.io, *.osm.io, api.osm.io
Certificate 2:
tile.openstreetmap.org, *.tile.openstreetmap.org, tile.osm.org, *.tile.osm.org
Certificate 3:
osmfoundation.org, *.osmfoundation.org, blog.openstreetmap.org, blog.osm.org, blog.openstreetmap.com, blog.openstreetmap.net, blog.openstreetmaps.org, switch2osm.org, *.switch2osm.org, switch2osm.com, *.switch2osm.com, opengeodata.org, *.opengeodata.org, thinkup.openstreetmap.org, thinkup.osm.org, otrs.openstreetmap.org, otrs.osm.org, foundation.openstreetmap.org, foundation.osm.org, stateofthemap.org *.stateofthemap.org, stateofthemap.com, *.stateofthemap.com
OSM Operations Group Support Ticket:
https://github.com/openstreetmap/operations/issues/2
@Firefishy

This comment has been minimized.

Copy link
Owner Author

commented Mar 22, 2015

Global Sign offer an Open Source certificate but I think it is only for a single domain: https://www.globalsign.com/en/ssl/ssl-open-source/

@Firefishy

This comment has been minimized.

Copy link
Owner Author

commented Mar 22, 2015

We currently use StartSSL CA for a few domains, but Java does not yet support them out-the-box yet: https://forum.startcom.org/viewtopic.php?f=15&t=1802

@joto

This comment has been minimized.

Copy link

commented Mar 25, 2015

This looks promising: https://letsencrypt.org/ . But it is only available "Mid-2015".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.