get onion back online for whonix.org

[phabricator-migrator]

Information

ID: 494
PHID: PHID-TASK-bdapo5lv2qn64k64nwyu
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

We still have the key for the onion we previously had. The bug why we turned off the onion previously should be fixed by now.

The Debian mirror serving over an onion (T399) seems to work. So we should get the onion for whonix.org back online.

Subdomains (phabricator.whonix.org and forums.whonix.org) are problematic. So we might just do it for www.whonix.org.

But maybe there is also a solution for sub domains? → Example code for running a (HTTP/HTTPS) Tor hidden service supporting subdomains. · GitHub

Does letsencrypt help with onions? → T443

Comments

---

Patrick

2016-04-11 16:29:36 UTC

Doesn’t looks like we can get letsencrypt ssl for our onion yet.

• If/when will LE support .onion addresses? - #41 by schoen - Feature Requests - Let's Encrypt Community Support
• onion address support · Issue #91 · certbot/certbot · GitHub

---

fortasse

2016-05-01 18:26:04 UTC

I’m posting from http://phabricator.kkkkkkkkkk63ava6.onion/T494

---

fortasse

2016-05-01 19:04:38 UTC

http://phabricator.kkkkkkkkkk63ava6.onion/
http://forums.kkkkkkkkkk63ava6.onion/
http://kkkkkkkkkk63ava6.onion (and http://www.kkkkkkkkkk63ava6.onion)
http://download.kkkkkkkkkk63ava6.onion/ (the same as https://www.whonix.org/download/)

all up and running.

I also updated Forcing Onion Connections on whonix.org, but I’m not sure it’s 100% accurate anymore. The xml posted there works pretty well for me. Phabricator is the only thing that seems to be giving trouble, the wiki and the forums appear to be perfectly happy with supplying relative path links and not redirecting back to whonix.org.

I’ll leave this open a while longer while we work out any issues, but it seems like things are working pretty well for me.

---

fortasse

2016-05-01 19:01:02 UTC

If/when LE let’s us get .onions on our certificate, I’ll do that as well.

---

HulaHoop

2016-05-11 22:17:35 UTC

The onion site for the forums and wiki works great however for phabricator when logging in it still redirects to the clearnet site with an error about not being able to set a cookie for the username.

---

Patrick

2016-05-11 22:23:29 UTC

I think the only solution may be this one:

Forcing Onion Connections on whonix.org

---

Patrick

2016-05-18 15:38:29 UTC

Works fine so far. No complaints. Closing. We can always reopen in case of issues.