<html><body><div id="edo-message"><div></div>On the SSL issue: keys.gnupg.net is an alias to the SKS keyserver pool, which is a number of public volunteer run servers:</div><div id="edo-message"><br></div><div id="edo-message"><a href="https://sks-keyservers.net/status/">https://sks-keyservers.net/status/</a></div><div id="edo-message"><br></div><div id="edo-message">My guess is you hit a misconfigured one that redirected you to TLS without checking what host you requested.</div><div id="edo-message"><br></div><div id="edo-message">For example I redirect http://keyserver.paulfurley.com to https://keyserver.paulfurley.com *only* if the requested host is keyserver.paulfurley.com. Otherwise I would serve a certificate with a mismatching domain.</div><div id="edo-message"><br></div><div id="edo-message">I'd recommend posting your finding to the sks-devel mailing list since it's probably something the pool should look out for and warn servers they're misconfigured. (I'll post it in the morning if you like.)</div><div id="edo-message"><br></div><div id="edo-message">Paul</div><div id="edo-meta"></div><div id="edo-original"><div><br><br><blockquote type="cite" style="margin:1ex 0 0 0;border-left:1px #ccc solid;padding-left:0.5ex;"><div>On Jul 10, 2017 at 10:58 pm, <<a href="mailto:tor@anondroid.com">tor</a>> wrote:<br><br></div><div><div>Actually, the directions on https://www.torproject.org/docs/debian.html.en work okay. I was trying to automate things with Ansible, but the format changed at some point, from something like:<br></div><div><br></div><div> apt_key: id=A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 url=http://keys.gnupg.net/pks/lookup?op=get&search=A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89<br></div><div><br></div><div>to:<br></div><div><br></div><div> apt_key: id=A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 keyserver=keys.gnupg.net<br></div><div><br></div><div>The URL at /pks/lookup no longer exists, so I saw a 404. Using the newer format with just the hostname of the keyserver it works okay.<br></div><div><br></div><div>Regarding http://keys.gnupg.net I still don't know why there is a SSL mismatch in the browser, or why you can no longer access the web UI, but it's not as broken as it looked.<br></div><div><br></div>
</div></blockquote></div></div></body></html>