Bug 1060231

Summary:	Download redirector downgrades from https to http
Product:	[openSUSE] openSUSE.org	Reporter:	Juergen Weigert <jnweiger>
Component:	BuildService	Assignee:	Adrian Schröter <adrian.schroeter>
Status:	RESOLVED NORESPONSE	QA Contact:	Adrian Schröter <adrian.schroeter>
Severity:	Normal
Priority:	P5 - None	CC:	adrian.schroeter, jnweiger, meissner, opensuse, s.parschauer, sebastian.parschauer
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Ubuntu
See Also:	http://bugzilla.suse.com/show_bug.cgi?id=1107994
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Juergen Weigert 2017-09-25 13:58:10 UTC

curl -i https://download.opensuse.org/repositories/isv:ownCloud:desktop/Ubuntu_16.04/Release.key
HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Sep 2017 13:54:29 GMT
Server: Apache/2.2.34 (Linux/SUSE)
Location: http://download.opensuse.org/repositories/isv:ownCloud:/desktop/Ubuntu_16.04/Release.key

Newer Ubuntu and Debian systems block this kind of downgrading from https to http and thus users can no longer install from OBS on these systems.

Possible fix: https://github.com/openSUSE/software-o-o/issues/123 backport this to current obs-instance?

Comment 1 Sebastian Parschauer 2018-09-11 11:36:41 UTC

I think Adrian is the wrong assignee here. Reported again as bug 1107994 for opensuse.org product which covers the mirrors.

Comment 2 Sebastian Parschauer 2018-09-11 11:43:09 UTC

I mean "Download Infrastructure" of cause. Sorry.

Comment 3 Sebastian Parschauer 2018-09-11 14:41:05 UTC

If OBS would show the download URIs as http instead of https, then this issue would occur less frequently I'm sure. I guess everybody uses copy&paste for the long URIs.

Comment 4 Sebastian Parschauer 2019-02-14 15:36:17 UTC

This is something worked on but rather slowly. The http workaround is working fine. So closing with noresponse for now.