Bug 1060231 - Download redirector downgrades from https to http
Summary: Download redirector downgrades from https to http
Status: RESOLVED NORESPONSE
Alias: None
Product: openSUSE.org
Classification: openSUSE
Component: BuildService (show other bugs)
Version: unspecified
Hardware: Other Ubuntu
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Adrian Schröter
QA Contact: Adrian Schröter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-09-25 13:58 UTC by Juergen Weigert
Modified: 2019-02-14 15:36 UTC (History)
6 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Juergen Weigert 2017-09-25 13:58:10 UTC 
curl -i https://download.opensuse.org/repositories/isv:ownCloud:desktop/Ubuntu_16.04/Release.key
HTTP/1.1 301 Moved Permanently
Date: Mon, 25 Sep 2017 13:54:29 GMT
Server: Apache/2.2.34 (Linux/SUSE)
Location: http://download.opensuse.org/repositories/isv:ownCloud:/desktop/Ubuntu_16.04/Release.key

Newer Ubuntu and Debian systems block this kind of downgrading from https to http and thus users can no longer install from OBS on these systems.

Possible fix: https://github.com/openSUSE/software-o-o/issues/123 backport this to current obs-instance?
Comment 1 Sebastian Parschauer 2018-09-11 11:36:41 UTC 
I think Adrian is the wrong assignee here. Reported again as bug 1107994 for opensuse.org product which covers the mirrors.
Comment 2 Sebastian Parschauer 2018-09-11 11:43:09 UTC 
I mean "Download Infrastructure" of cause. Sorry.
Comment 3 Sebastian Parschauer 2018-09-11 14:41:05 UTC 
If OBS would show the download URIs as http instead of https, then this issue would occur less frequently I'm sure. I guess everybody uses copy&paste for the long URIs.
Comment 4 Sebastian Parschauer 2019-02-14 15:36:17 UTC 
This is something worked on but rather slowly. The http workaround is working fine. So closing with noresponse for now.