[NTLK] [ANN] UNNA.org scheduled maintenance today

[Morgan Aldridge]

On Mon, Jan 5, 2026 at 15:58 Tom <tom+newtontalk at falkensweb.com> wrote:

> On Monday, 5 January 2026 20:47:16 Greenwich Mean Time Morgan Aldridge
> wrote:
> > This work will allow me to support HTTPS for the UNNA.org sites. While a
> > small change, I hope it'll help me keep nudging other things forward for
> > UNNA.
>
> As long as it's optional, so we can still connect from our Newtons :)


100%! HTTP will remain fully supported and there will be no automatic
redirection. The only exception will likely be the Subversion server, as
it'd be nice to have a little more security on the source code and data.

I'm sure you already know, but TLS is currently broken:
>
> # wget
> https://www.unna.org/unna//development/documentation/NewtonProgrammerGuide20.pdf
> --2026-01-05 20:55:19--
> https://www.unna.org/unna//development/documentation/NewtonProgrammerGuide20.pdf
> Resolving www.unna.org (www.unna.org)... 24.60.111.191
> Connecting to www.unna.org (www.unna.org)|24.60.111.191|:443... connected.
> GnuTLS: Public key signature verification has failed.
> Unable to establish SSL connection.
> #


In this case, yes. However, I will never complain about or get annoyed if
others check and report things like this. We're not mind-readers and I'm
only human (I swear! Though that's probably painfully obvious at this
point), so I always appreciate others having my back.

I just hadn't gotten as far as configuring the HTTPS proxying and SSL/TLS
certificates. It's taken me a couple extra days to do so due to some
followup on the patching required during the upgrades, but it is now
implemented and working. Please do confirm!

I'm using LetsEncrypt.org with an ACME client which uses the "http-01"
challenge type. This should work well with most browsers, but I'm not too
worried since HTTP is still going to be supported.

Morgan
---
http://makkintosshu.com/
https://centresteer.com/
https://tobuji.tech/
http://unna.org/