Skip to content

Conversation

@jedisct1
Copy link
Contributor

@jedisct1 jedisct1 commented Jul 1, 2025

This adds a new mirror running on the Fastly CDN.

This adds a new mirror running on the Fastly CDN
@mlugg
Copy link
Member

mlugg commented Jul 1, 2025

It seems like Zig's TLS implementation isn't playing nicely with this mirror (error.TlsInitializationFailed). Unfortunately, that'll need fixing upstream before this can be merged.

Looks like the server is returning an illegal_parameter alert after our client sends ClientKeyExchange+ChangeCipherSpec+Finished.

mlugg added a commit that referenced this pull request Jul 2, 2025
Minimizing the amount of code running on the website machine is
important to avoid potential security vulnerabilities.

Since we now need to fetch Zig (rather than it being preinstalled), also
update `check-mirrors` to the latest Zig dev version. We'll want to do
this soon anyway due to ziglang/zig#24316 blocking #492.
mlugg added a commit that referenced this pull request Jul 2, 2025
Minimizing the amount of code running on the website machine is
important to avoid potential security vulnerabilities.

Since we now need to fetch Zig (rather than it being preinstalled), also
update `check-mirrors` to the latest Zig dev version. We'll want to do
this soon anyway due to ziglang/zig#24316 blocking #492.
@jedisct1
Copy link
Contributor Author

If a CNAME record could be set up in the ziglang.org domain, it would immediately enable TLS 1.3 and resolve the issue.

@jedisct1
Copy link
Contributor Author

Fixed by ziglang/zig#25007

@mlugg
Copy link
Member

mlugg commented Aug 26, 2025

Thanks for the upstream work! I'll do my best to review it shortly so as to unblock this PR -- though it might take a little while since I'll have to consult specs as I am very unfamiliar with TLS etc :P

@homersimpsons
Copy link

The mirror is still up, for example https://ziglang.freetls.fastly.net/zig-aarch64-netbsd-0.15.2.tar.xz.minisig

  1. @jedisct1 you probably want to rebase to resolve the conflits
  2. @mlugg will then probably be able to merge this

jedisct1 and others added 4 commits October 22, 2025 23:19
* main: (149 commits)
  devlog: update code example
  CI: update gh sponsor list
  add silares
  0.15.2 documentation: link to 0.15.2 std docs
  plot
  css: more zig syntax
  css: more zig syntax highlighting
  css: align css colors for zig code snippets
  devlog: Async DNS Resolution
  Improve Japanese translation and fix formatting
  update Friendly toward package maintainers section
  overview: update target support link
  add 0.15.2 to build tarballs template
  add release 0.15.2 artifacts
  CI: update gh sponsor list
  devlog: no-matrix
  CI: update gh sponsor list
  Fix unintended compile error in build.zig example
  CI: update gh sponsor list
  end of fundraiser
  ...
…to fastlymirror

* 'fastlymirror' of github.com:jedisct1/www.ziglang.org:
We should probably update other scripts as well, but this is
unrelated and can be done in another PR
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants