If one goes to this place: https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU... and selects to download, say, the x64 src RPM: https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/... firefox says this: ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site. Why is that site even involved? Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access? -- Roger Oberholtzer
On Thu, Dec 15, 2022 at 4:04 PM Roger Oberholtzer <roger.oberholtzer@gmail.com> wrote:
If one goes to this place:
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
and selects to download, say, the x64 src RPM:
https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/...
firefox says this:
ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
Why is that site even involved?
Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access?
Mirrors are not owned by (open)SUSE.
On Thu, 15 Dec 2022 14:03:37 +0100 Roger Oberholtzer <roger.oberholtzer@gmail.com> wrote:
If one goes to this place:
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
and selects to download, say, the x64 src RPM:
https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/...
firefox says this:
ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
Why is that site even involved? Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access?
In my case it starts to download the rpm instead of any of this, so your problem is apparently local and you will need to provide more detail. Yes, gwdg.de is a very well known mirror. I can't even verify the access policy $ wget http://ftp.gwdg.de/ works for me with no redirections indicated or error messages produced. Maybe it depends on OS or application versions?
On 15/12/2022 14.03, Roger Oberholtzer wrote:
If one goes to this place:
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
and selects to download, say, the x64 src RPM:
https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/...
firefox says this:
ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
Why is that site even involved? Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access?
I just tried <https://ftp.gwdg.de/pub/opensuse/repositories/devel%3A/tools/openSUSE_Tumbleweed/src/ElectricFence-2.2.2-677.d_t.25.src.rpm>, with firefox 102.6.0esr and wget, with no error messages. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.4 (Legolas))
download.opensuse.org will redirect you to a mirror close to you - see https://mirrors.opensuse.org/. As already mentioned, those mirrors are operated by third parties, and might have malfunctions outside of our control - in this case it seems to be a certificate issue on the end of GWDG. On 12/15/22 14:03, Roger Oberholtzer wrote:
If one goes to this place:
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
and selects to download, say, the x64 src RPM:
https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/...
firefox says this:
ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
Why is that site even involved? Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access?
On 15.12.2022 18:47, Georg Pfuetzenreuter wrote:
download.opensuse.org will redirect you to a mirror close to you - see https://mirrors.opensuse.org/. As already mentioned, those mirrors are operated by third parties, and might have malfunctions outside of our control - in this case it seems to be a certificate issue on the end of GWDG.
I cannot reproduce it. I have no problems connecting to it or downloading using HTTP, both with Chromium and Firefox.
On 12/15/22 14:03, Roger Oberholtzer wrote:
If one goes to this place:
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
and selects to download, say, the x64 src RPM:
https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/...
firefox says this:
ftp.gwdg.de has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.
Why is that site even involved? Is it a mirror for OBS? And if so, shouldn't it have the same access setup for this access?
On 15/12/2022 18.42, Andrei Borzenkov wrote:
On 15.12.2022 18:47, Georg Pfuetzenreuter wrote:
download.opensuse.org will redirect you to a mirror close to you - see https://mirrors.opensuse.org/. As already mentioned, those mirrors are operated by third parties, and might have malfunctions outside of our control - in this case it seems to be a certificate issue on the end of GWDG.
I cannot reproduce it. I have no problems connecting to it or downloading using HTTP, both with Chromium and Firefox.
Try with https instead. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.4 (Legolas))
I tried with chrome and it made a similar complaint. The difference is that chrome let me override this. I am not generating the link. It it from OBS. As I wrote, go to this link and select to download the x86_64 src source RPM. It is only that one that it does this for. https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU... On Thu, Dec 15, 2022 at 6:50 PM Carlos E. R. <robin.listas@telefonica.net> wrote:
On 15/12/2022 18.42, Andrei Borzenkov wrote:
On 15.12.2022 18:47, Georg Pfuetzenreuter wrote:
download.opensuse.org will redirect you to a mirror close to you - see https://mirrors.opensuse.org/. As already mentioned, those mirrors are operated by third parties, and might have malfunctions outside of our control - in this case it seems to be a certificate issue on the end of GWDG.
I cannot reproduce it. I have no problems connecting to it or downloading using HTTP, both with Chromium and Firefox.
Try with https instead.
-- Cheers / Saludos,
Carlos E. R.
(from openSUSE 15.4 (Legolas))
-- Roger Oberholtzer
On 16/12/2022 16.40, Roger Oberholtzer wrote:
I tried with chrome and it made a similar complaint. The difference is that chrome let me override this.
I am not generating the link. It it from OBS. As I wrote, go to this link and select to download the x86_64 src source RPM. It is only that one that it does this for.
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
That's a redirector, you have to provide the final and actual link for us to try. Each of us can get a different mirror. I tried with <https://ftp.gwdg.de/pub/opensuse/repositories/devel%3A/tools/openSUSE_Tumbleweed/src/ElectricFence-2.2.2-677.d_t.25.src.rpm>, with firefox 102.6.0esr and wget, and got no error messages at all. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.4 (Legolas))
On Fri, Dec 16, 2022 at 6:19 PM Carlos E. R. <robin.listas@telefonica.net> wrote:
On 16/12/2022 16.40, Roger Oberholtzer wrote:
I tried with chrome and it made a similar complaint. The difference is that chrome let me override this.
I am not generating the link. It it from OBS. As I wrote, go to this link and select to download the x86_64 src source RPM. It is only that one that it does this for.
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
That's a redirector, you have to provide the final and actual link for us to try. Each of us can get a different mirror.
I tried with <https://ftp.gwdg.de/pub/opensuse/repositories/devel%3A/tools/openSUSE_Tumbleweed/src/ElectricFence-2.2.2-677.d_t.25.src.rpm>, with firefox 102.6.0esr and wget, and got no error messages at all.
So I wonder why I got the error. I can report that it is now gone. Some funny activity out there for a bit? Maybe when you tried it it was back to the real site. Our company uses Cisco Umbrella that plays with the DNS to limit access to what is deemed bad content. Maybe that had a hiccup. -- Roger Oberholtzer
On 19/12/2022 08.29, Roger Oberholtzer wrote:
On Fri, Dec 16, 2022 at 6:19 PM Carlos E. R. <> wrote:
On 16/12/2022 16.40, Roger Oberholtzer wrote:
I tried with chrome and it made a similar complaint. The difference is that chrome let me override this.
I am not generating the link. It it from OBS. As I wrote, go to this link and select to download the x86_64 src source RPM. It is only that one that it does this for.
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
That's a redirector, you have to provide the final and actual link for us to try. Each of us can get a different mirror.
I tried with <https://ftp.gwdg.de/pub/opensuse/repositories/devel%3A/tools/openSUSE_Tumbleweed/src/ElectricFence-2.2.2-677.d_t.25.src.rpm>, with firefox 102.6.0esr and wget, and got no error messages at all.
So I wonder why I got the error. I can report that it is now gone. Some funny activity out there for a bit? Maybe when you tried it it was back to the real site. Our company uses Cisco Umbrella that plays with the DNS to limit access to what is deemed bad content. Maybe that had a hiccup.
I have the vague recollection that Cisco Umbrella has caused problems for people in the past. You yourself, I think. -- Cheers / Saludos, Carlos E. R. (from openSUSE 15.4 (Legolas))
* Roger Oberholtzer <roger.oberholtzer@gmail.com> [12-16-22 13:06]:
I tried with chrome and it made a similar complaint. The difference is that chrome let me override this.
I am not generating the link. It it from OBS. As I wrote, go to this link and select to download the x86_64 src source RPM. It is only that one that it does this for.
https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU...
you know that you can add *specific* address in zypper's repos as: [Tumbleweed.OSS] name=openSUSE-Tumbleweed OSS enabled=1 autorefresh=0 baseurl=https://download.opensuse.org/tumbleweed/repo/oss/ http://download.opensuse.org/tumbleweed/repo/oss/ https://ftp.gwdg.de/pub/opensuse/tumbleweed/repo/oss/ http://ftp.gwdg.de/pub/opensuse/tumbleweed/repo/oss/ http://ftp.ussg.iu.edu/linux/opensuse/tumbleweed/repo/oss/ http://distro.ibiblio.org/opensuse/tumbleweed/repo/oss/ http://suse.mobile-central.org/tumbleweed/repo/oss/ http://ftp.uni-erlangen.de/opensuse/tumbleweed/repo/non-oss/ http://ftp5.gwdg.de/pub/opensuse/tumbleweed/repo/oss/ type=rpm-md and zypper will find one that works. designating your own preferred mirrors. -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet oftc
Hello, In the Message; Subject : openSUSE OBS mystery. Message-ID : <CANkOqwN=emkCTES4mgFvrZtpg3q=CpcKywFSMLVvw056DvSb+A@mail.gmail.com> Date & Time: Thu, 15 Dec 2022 14:03:37 +0100 [RO] == Roger Oberholtzer <roger.oberholtzer@gmail.com> has written: RO> If one goes to this place: RO> https://build.opensuse.org/package/binaries/devel:tools/ElectricFence/openSU... RO> and selects to download, say, the x64 src RPM: RO> https://download.opensuse.org/repositories/devel:/tools/openSUSE_Tumbleweed/... RO> firefox says this: RO> ftp.gwdg.de has a security policy called HTTP Strict Transport RO> Security (HSTS), which means that Firefox can only connect to it RO> securely. You can’t add an exception to visit this site. RO> Why is that site even involved? Is it a mirror for OBS? And if so, RO> shouldn't it have the same access setup for this access? What is the result of; $ cat /var/cache/zypp/geoip.d/download.opensuse.org In my case, for the past about 20 days: https://download.opensuse.org/repositories/ downloads from this site started to have problems (not being able to download, or files being abnormal even if I could downloaded), and after checking it out, I found that the reult of $ cat /var/cache/zypp/geoip.d/download.opensuse.org was mirrorcache-jp.opensuse.org. So, I changed this to mirrorcache-us.opensuse.org and the problem was solved (but not, I feel, completely). Reading the emails of the people who replied to your email, it seems that this kind of problem is limited to a few regions. BTW, I keep wondering where to report it. Does anyone know where I should report it? Regards. --- ┏━━┓彡 野宮 賢 mail-to: nomiya @ galaxy.dti.ne.jp ┃＼／彡 ┗━━┛ "Tim Cook, the C.E.O. of Apple, said earlier this year that he would not let his nephew join social networks. Bill Gates banned cellphone until his children were teenagers, and Melinda Gates wrote that she wished they had waited even longer. Steve Jobs would not let his young children near iPads." -- The New York Times --
Hello, In the Message; Subject : Re: openSUSE OBS mystery. Message-ID : <878rj8npw1.wl-nomiya@galaxy.dti.ne.jp> Date & Time: Fri, 16 Dec 2022 09:39:10 +0900 [MN] == Masaru Nomiya <nomiya@galaxy.dti.ne.jp> has written: [...] MN> So, I changed this to mirrorcache-us.opensuse.org and the problem was MN> solved (but not, I feel, completely). MN> Reading the emails of the people who replied to your email, it seems MN> that this kind of problem is limited to a few regions. MN> BTW, I keep wondering where to report it. MN> Does anyone know where I should report it? I confirmed now, it had been repaired． Thanks to someone who has concerned. Regards. --- ┏━━┓彡 Masaru Nomiya mail-to: nomiya @ galaxy.dti.ne.jp ┃＼／彡 ┗━━┛ "A society bound by e-mail and mobile phones deprives us of the freedom to face ourselves and indulge our fantasies." -- Michael Crichton (Speech in Japan) --
participants (7)
-
Andrei Borzenkov -
Carlos E. R. -
Dave Howorth -
Georg Pfuetzenreuter -
Masaru Nomiya -
Patrick Shanahan -
Roger Oberholtzer