[Bug 1130349] New: Zypper gets redirected to HTTP mirror when trying to download package over HTTPS
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349 Bug ID: 1130349 Summary: Zypper gets redirected to HTTP mirror when trying to download package over HTTPS Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: bnc-team-screening@forge.provo.novell.com Reporter: linus.kardell@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- When Zypper tries to download a package from the update repo (specifically it tries to get https://download.opensuse.org/debug/update/leap/15.0/oss/x86_64/Mesa-debugso...), it gets redirected to http://ftp.lysator.liu.se/, and it fails since it gets redirected from HTTPS to HTTP. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349#c1
Andreas Stieger
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349#c2
Michael Andres
The bug, then, is that mirrorbrain redirects from HTTPS to HTTP and/or that libzypp does not gracefully allow this. Question is whether it should...
In case the securiy team would confirm, this does not create any issue I'd change it. But AFAIK it is not. IMO, like Andreas said, it's a mirrorbrain issue in download.opensuse.org and schoud be reported there. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349#c3
Andreas Stieger
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349#c4
Andreas Stieger
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349
http://bugzilla.opensuse.org/show_bug.cgi?id=1130349#c7
Andreas Stieger
participants (1)
-
bugzilla_noreply@novell.com