http://bugzilla.opensuse.org/show_bug.cgi?id=1070789 Bug ID: 1070789 Summary: Following the manual package installations on OBS lead to a zypper error Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Software Portal Assignee: benji@opensuse.org Reporter: lgrimmer@suse.com QA Contact: opensuse-communityscreening@forge.provo.novell.com Found By: --- Blocker: --- When following the instructions on the software portal to add a package repository, the provided installation instructions suggest adding the repo via HTTPS: e.g. clicking on "Add repository and install manually" https://software.opensuse.org//download.html?project=systemsmanagement%3Asaltstack%3Aproducts&package=salt However, trying to use that command lead to a confusing error message: ceph-01:~ # zypper addrepo https://download.opensuse.org/repositories/systemsmanagement:saltstack:produ... Download (curl) error for 'https://download.opensuse.org/repositories/systemsmanagement:saltstack:produ...': Error code: Bad URL Error message: Protocol http not supported or disabled in libcurl Abort, retry, ignore? [a/r/i/...? shows all options] (a): a Abort, retry, ignore? [a/r/i/...? shows all options] (a): a Problem encountered while trying to read the file at the specified URI: ABORT request: Aborting requested by user When downloading the .repo file with an alternative donwnload tool like wget, the actual reason for this error becomes clear: ceph-01:~ # wget https://download.opensuse.org/repositories/systemsmanagement:saltstack:produ... --2017-12-01 13:46:46-- https://download.opensuse.org/repositories/systemsmanagement:saltstack:produ... Resolving download.opensuse.org (download.opensuse.org)... 2001:67c:2178:8::13, 195.135.221.134 Connecting to download.opensuse.org (download.opensuse.org)|2001:67c:2178:8::13|:443... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: http://download.opensuse.org/repositories/systemsmanagement:saltstack:/produ... [following] --2017-12-01 13:46:46-- http://download.opensuse.org/repositories/systemsmanagement:saltstack:/produ... Connecting to download.opensuse.org (download.opensuse.org)|2001:67c:2178:8::13|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/prod... [following] --2017-12-01 13:46:46-- http://download.opensuse.org/repositories/systemsmanagement:/saltstack:/prod... Reusing existing connection to [download.opensuse.org]:80. HTTP request sent, awaiting response... 200 OK Length: 383 [text/plain] Saving to: ‘systemsmanagement:saltstack:products.repo’ 100%[======================================>] 383 --.-K/s in 0s 2017-12-01 13:46:46 (102 MB/s) - ‘systemsmanagement:saltstack:products.repo’ saved [383/383] As you can see, download.opensuse.org returns a "HTTP 301 Moved Permanently" code, which point to a non-SSL (http) location. The curl-based implementation in "zypper addrepo" does not seem to support this for security reasons. Ideally, the software portal should not actually perform a redirect to the non-SSL location, but rather deliver the requested repo file via https. Alternatively, the instructions for adding a repo manually should be updated, to avoid irritation. -- You are receiving this mail because: You are on the CC list for the bug.