Skip to content

Secure hosting of EclEmma update site on https://update.eclemma.org

Hi, I'm one of the project leads of the EclEmma project.

Summary

We would like to find a way to host the EclEmma (an Eclipse project) update site with https.

Problem

Historically we use http://update.eclemma.org (backed by an S3 bucket) as the EclEmma update site. This site has currently no https support and is therefore not secure as an Eclipse update site.

Possible Solutions

We would like to learn what are the best options host a secure https update site.

Option 1: We continue hosting on our update site on the existing AWS account. To manage SSL certificates we would need to host the DNS zone for eclemma.org (or update.eclemma.org) ourselves. Would EO allow this?

Option 2: The update site https://update.eclemma.org will be hosted on EO infrastructure. Would EO provide such a service for their projects?

Can you please let us know which option you prefer. Many Thanks!

Priority

  • Urgent
  • High
  • Medium
  • Low

Severity

  • Blocker
  • Major
  • Normal
  • Low

Impact

EclEmma cannot be installed any more on latest Eclipse versions which do not allow http update sites any more. BUT This actually is a smaller issue as EclEmma is included in most Eclipse packages.