Launchpad itself

https redirects pose download problem

Bug #174186 reported by Steve McMahon
14
Affects Status Importance Assigned to Milestone
Launchpad itself
Invalid
Undecided
Unassigned

Bug Description

The project I'm working with (Plone) needs to have downloads available via http (not just https), and I'll bet others will also.

Why?

1) Some users will be downloading with tools like wget that may not have ssl libraries in all builds;

2) Automated build mechanisms may not have ssl available.

Revision history for this message
Sidnei da Silva (sidnei) wrote :

This is a bug on Launchpad Downloads, not on Launchpad Bugs (malone).

Changed in malone:
status: New → Invalid
Revision history for this message
Diogo Matsubara (matsubara) wrote :

Brad will follow up with this. I'm setting as Incomplete for now because it needs some discussion about infrastructure changes before any action can be taken to fix it.

Changed in launchpad:
status: New → Incomplete
Revision history for this message
Diogo Matsubara (matsubara) wrote :

Sorry, setting it as confirmed as we acknowledge this is a problem but it needs discussion about a proper solution.

Changed in launchpad:
status: Incomplete → Confirmed
Revision history for this message
Martin Pool (mbp) wrote :

This may be an issue for Bazaar use of Launchpad too.

I poked around a bit.

The downloads are ultimately served from launchpadlibrarian.net, which does happily serve http urls, eg. http://launchpadlibrarian.net/11342645/bzr-1.1.tar.gz.asc

However, the release download page <https://edge.launchpad.net/bzr/1.1/1.1> relies on https in 3 ways:

1- this page is served on https only. (Not a problem if the urls are copied to an external project web site available on http.)

2- this page points to eg <https://edge.launchpad.net/bzr/1.1/1.1/+download/bzr-1.1.tar.gz.asc> which is only available on https.

3- that location redirects to an https url on lpl.net.

Revision history for this message
Brad Crittenden (bac) wrote :

Martin's analysis is correct except for a typo in point 3 -- the location ultimately redirects to a http url on launchpadlibrarian.net.

Changed in launchpad:
assignee: nobody → bradcrittenden
Revision history for this message
Martin Pool (mbp) wrote : Re: [Bug 174186] Re: https redirects pose download problem

On 16/02/2008, Brad Crittenden <email address hidden> wrote:
> Martin's analysis is correct except for a typo in point 3 -- the
> location ultimately redirects to a http url on launchpadlibrarian.net.

I was abbreviating, crptcly :)

--
Martin

Brad Crittenden (bac)
Changed in launchpad:
importance: Undecided → High
milestone: none → 1.2.3
Revision history for this message
Brad Crittenden (bac) wrote :

Code fix committed in RF 5776.
Changes to Apache rules are still required.

Changed in launchpad:
status: Confirmed → In Progress
Revision history for this message
Brad Crittenden (bac) wrote :

An even better fix landed in RF 5876.

Changed in launchpad:
status: In Progress → Fix Committed
Brad Crittenden (bac)
Changed in launchpad:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.