Project

General

Profile

Actions

tickets #65103

closed

openSUSE repo download mirror problem over HTTPS

Added by amontero@tinet.org almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Mirrors
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:

Description

(Contacting as per #openSUSE-admin IRC banner, after no response on channel)

Hi.
I'm installing holland-backup from openSUSE mirrors via apt-get using
a https://download.opensuse.org/ mirror (notice httpS).
When apt-get fetches the package, it errors out complaining about
"http" not supported/allowed. After diagnosing, I've found that
openSUSE mirror is doing a 302 'downgrading' from https to http, thus
triggering error from apt due to unsupported/invalid protocol (plain
http).

$ curl -IL https://download.opensuse.org/repositories/home:/holland-backup/xUbuntu_16.04/./all/holland_1.2.1-0_all.deb
HTTP/2 302
date: Tue, 31 Mar 2020 15:03:57 GMT
server: Apache/2.4.33 (Linux/SUSE)
x-mirrorbrain-mirror: downloadcontent.opensuse.org
x-mirrorbrain-realm: region
link: https://download.opensuse.org/repositories/home:/holland-backup/xUbuntu_16.04/all/holland_1.2.1-0_all.deb.meta4;
rel=describedby; type="application/metalink4+xml"
link: http://downloadcontent.opensuse.org/repositories/home:/holland-backup/xUbuntu_16.04/all/holland_1.2.1-0_all.deb;
rel=duplicate; pri=1; geo=de
location: http://downloadcontent.opensuse.org/repositories/home:/holland-backup/xUbuntu_16.04/all/holland_1.2.1-0_all.deb
content-type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 31 Mar 2020 15:03:57 GMT
Content-Type: application/octet-stream
Content-Length: 92364
Last-Modified: Fri, 06 Mar 2020 17:40:06 GMT
Connection: keep-alive
ETag: "5e628af6-168cc"
Accept-Ranges: bytes

I'm not sure if the https to http 302 is intentional or just a
misconfiguration, but I guess that apt's curl_* calls are being
restricted to 'https only' to avoid downgrades and this redirect makes
it fail.
I've verified other https repos working OK.

I can easily switch to plain http, since it's no big deal, but I
wanted to report it anyway.
Hope it's useful
Regards,
Alfonso.

Actions #1

Updated by pjessen almost 4 years ago

  • Category set to Mirrors
  • Status changed from New to Closed
  • Private changed from Yes to No

amontero@tinet.org wrote:

I can easily switch to plain http, since it's no big deal, but I
wanted to report it anyway.

Thanks for the report Alfonso. Basically our mirroring infrastructure does not support https, switching to http will solve your problem.

Actions

Also available in: Atom PDF