Use HTTPS URLs in templates

[Landry Breuil]

On Thu, Dec 14, 2017 at 7:45 AM, Zaphod <justthisguyyouknow at nigge.rs> wrote:
> The SSL cert set up for the site is only valid for tibeti.xfce.org so
> they'd have to change that as well.
>
> It's an LE cert so it should be very easy to do this on, though.

It's not as easy as it seems, since :
- archive.xfce.org is served by a mirrorbrain apache module, i think i
had a look at some point and gave up on understanding the vhost
configuration which is huge
- https://releases.xfce.org is a totally different website, serving
the release manager
- http://releases.xfce.org is an historical 302 redirect to
http://archive.xfce.org (which might be used by some packagers ?)

We dont want to break existing workflows, so changes have to be done
carefully (ie dont do HSTS on archive.xfce.org, or redirect
http://releases.xfce.org to https://archive.xfce.org just to discover
it doesnt work for some reason..)

I'll try to have a second look at it. sigh.

Landry