tickets #25220
closedtickets #2392: downloading repository key should use SSL
download.opensuse.org should always use HTTPS
0%
Description
Hi Admins,
At the moment download.o.o uses HTTP whenever possible.
$ curl -I http://download.opensuse.org
HTTP/1.1 200 OK
Date: Tue, 12 Sep 2017 10:35:48 GMT
Server: Apache/2.2.34 (Linux/SUSE)
X-Prefix: 0.0.0.0/0
X-AS: 0
Content-Type: text/html;charset=ISO-8859-1
Furthermore, repository project pages like
https://build.opensuse.org/repositories/Virtualization:containers
use HTTP, even though the HTTPS works properly in download.o.o.
It would be great to add a redirection from HTTP to HTTPS and also rewrite
URLs in build.opensuse.org and https://en.opensuse.org/Package_repositories to
point to HTTPS directly.
Thanks in advance,
Pavlos
Updated by Anonymous over 6 years ago
only the signing key really needs to be sent via https. the rest can come via http.
Updated by tampakrap over 6 years ago
- Status changed from New to Closed
- Parent task set to #2392
closing as duplicate of #2392