{"action":"created","issue":{"url":"https://api.github.com/repos/smira/aptly/issues/292","labels_url":"https://api.github.com/repos/smira/aptly/issues/292/labels{/name}","comments_url":"https://api.github.com/repos/smira/aptly/issues/292/comments","events_url":"https://api.github.com/repos/smira/aptly/issues/292/events","html_url":"https://github.com/smira/aptly/issues/292","id":103785059,"number":292,"title":"aptly needs option for securing https client connections with certificate","user":{"login":"dankegel","id":170976,"avatar_url":"https://avatars.githubusercontent.com/u/170976?v=3","gravatar_id":"","url":"https://api.github.com/users/dankegel","html_url":"https://github.com/dankegel","followers_url":"https://api.github.com/users/dankegel/followers","following_url":"https://api.github.com/users/dankegel/following{/other_user}","gists_url":"https://api.github.com/users/dankegel/gists{/gist_id}","starred_url":"https://api.github.com/users/dankegel/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dankegel/subscriptions","organizations_url":"https://api.github.com/users/dankegel/orgs","repos_url":"https://api.github.com/users/dankegel/repos","events_url":"https://api.github.com/users/dankegel/events{/privacy}","received_events_url":"https://api.github.com/users/dankegel/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-08-28T19:54:23Z","updated_at":"2015-09-18T13:27:36Z","closed_at":null,"body":"It would be good if aptly could mirror a remote apt repository that was secured via\r\nhttps client certificates (see e.g. http://nategood.com/client-side-certificate-authentication-in-ngi \r\nhttp://serverfault.com/questions/340887/using-a-self-signed-ssl-cert-for-an-https-based-internal-apt-repository \r\nhttps://onebitbug.me/2014/08/09/setting-up-secure-private-ppa/ )\r\n\r\nWorkaround may be to use stunnel and unmodified aptly.\r\n\r\n(I'm no go programmer, but if I were implementing this myself, I might google at random for\r\nan example like https://gist.github.com/michaljemala/d6f4e01c4834bf47a9c4 and just start hacking :-)\r\n"},"comment":{"url":"https://api.github.com/repos/smira/aptly/issues/comments/141451342","html_url":"https://github.com/smira/aptly/issues/292#issuecomment-141451342","issue_url":"https://api.github.com/repos/smira/aptly/issues/292","id":141451342,"user":{"login":"smira","id":55211,"avatar_url":"https://avatars.githubusercontent.com/u/55211?v=3","gravatar_id":"","url":"https://api.github.com/users/smira","html_url":"https://github.com/smira","followers_url":"https://api.github.com/users/smira/followers","following_url":"https://api.github.com/users/smira/following{/other_user}","gists_url":"https://api.github.com/users/smira/gists{/gist_id}","starred_url":"https://api.github.com/users/smira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smira/subscriptions","organizations_url":"https://api.github.com/users/smira/orgs","repos_url":"https://api.github.com/users/smira/repos","events_url":"https://api.github.com/users/smira/events{/privacy}","received_events_url":"https://api.github.com/users/smira/received_events","type":"User","site_admin":false},"created_at":"2015-09-18T13:27:36Z","updated_at":"2015-09-18T13:27:36Z","body":"@dankegel @toninog it seems that there are two questions:\r\n\r\n1. How to make aptly trust self-signed *server* TLS certificate?\r\n2. How to make aptly supply *client* TLS certificate while making HTTPS requests?\r\n\r\nAm I right?"}}