When following the instructions on the software portal to add a package
repository, the provided installation instructions suggest adding the repo via
HTTPS:
e.g. clicking on "Add repository and install manually"
https://software.opensuse.org//download.html?project=systemsmanagement%3Asaltstack%3Aproducts&package=salt
However, trying to use that command lead to a confusing error message:
ceph-01:~ # zypper addrepo
https://download.opensuse.org/repositories/systemsmanagement:saltstack:products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
Download (curl) error for
'https://download.opensuse.org/repositories/systemsmanagement:saltstack:products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo':
Error code: Bad URL
Error message: Protocol http not supported or disabled in libcurl
Abort, retry, ignore? [a/r/i/...? shows all options] (a): a
Abort, retry, ignore? [a/r/i/...? shows all options] (a): a
Problem encountered while trying to read the file at the specified URI:
ABORT request: Aborting requested by user
When downloading the .repo file with an alternative donwnload tool like wget,
the actual reason for this error becomes clear:
ceph-01:~ # wget
https://download.opensuse.org/repositories/systemsmanagement:saltstack:products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
--2017-12-01 13:46:46--
https://download.opensuse.org/repositories/systemsmanagement:saltstack:products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
Resolving download.opensuse.org (download.opensuse.org)... 2001:67c:2178:8::13,
195.135.221.134
Connecting to download.opensuse.org
(download.opensuse.org)|2001:67c:2178:8::13|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location:
http://download.opensuse.org/repositories/systemsmanagement:saltstack:/products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
[following]
--2017-12-01 13:46:46--
http://download.opensuse.org/repositories/systemsmanagement:saltstack:/products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
Connecting to download.opensuse.org
(download.opensuse.org)|2001:67c:2178:8::13|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location:
http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
[following]
--2017-12-01 13:46:46--
http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/products/openSUSE_Tumbleweed/systemsmanagement:saltstack:products.repo
Reusing existing connection to [download.opensuse.org]:80.
HTTP request sent, awaiting response... 200 OK
Length: 383 [text/plain]
Saving to: ���systemsmanagement:saltstack:products.repo���
100%[======================================>] 383 --.-K/s in 0s
2017-12-01 13:46:46 (102 MB/s) - ���systemsmanagement:saltstack:products.repo���
saved [383/383]
As you can see, download.opensuse.org returns a "HTTP 301 Moved Permanently"
code, which point to a non-SSL (http) location. The curl-based implementation
in "zypper addrepo" does not seem to support this for security reasons.
Ideally, the software portal should not actually perform a redirect to the
non-SSL location, but rather deliver the requested repo file via https.
Alternatively, the instructions for adding a repo manually should be updated,
to avoid irritation.