NetBSD Problem Report #54811

From dholland@netbsd.org  Tue Dec 31 02:23:05 2019
Return-Path: <dholland@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id A5B317A17E
	for <gnats-bugs@gnats.NetBSD.org>; Tue, 31 Dec 2019 02:23:05 +0000 (UTC)
Message-Id: <20191231022305.5DC9F84D8E@mail.netbsd.org>
Date: Tue, 31 Dec 2019 02:23:05 +0000 (UTC)
From: dholland@NetBSD.org
Reply-To: dholland@NetBSD.org
To: gnats-bugs@NetBSD.org
Subject: https lost crossing to nyftp
X-Send-Pr-Version: 3.95

>Number:         54811
>Category:       misc
>Synopsis:       https lost crossing to nyftp
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 31 02:25:00 +0000 2019
>Last-Modified:  Wed Jun 09 01:50:01 +0000 2021
>Originator:     David A. Holland
>Release:        n/a
>Organization:
>Environment:
n/a
>Description:

At https://cdn.netbsd.org/pub/, the link for NetBSD-daily is
https://cdn.netbsd.org/pub/NetBSD-daily/, which is great, but opening
it redirects to http://nycdn.netbsd.org/pub/NetBSD-daily/, without
https, which is not good at all given that this is where one goes to
download things.

Better to always redirect to https if it can't match from the input
request.

>How-To-Repeat:

>Fix:

I assume something needs to be updated in the redirect rules...

>Audit-Trail:
From: mlelstv@serpens.de (Michael van Elst)
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: misc/54811: https lost crossing to nyftp
Date: Tue, 31 Dec 2019 06:39:44 -0000 (UTC)

 dholland@NetBSD.org writes:

 >At https://cdn.netbsd.org/pub/, the link for NetBSD-daily is
 >https://cdn.netbsd.org/pub/NetBSD-daily/, which is great, but opening
 >it redirects to http://nycdn.netbsd.org/pub/NetBSD-daily/,


 The webserver itself on ftp.netbsd.org (now?) redirects to nycdn and keeps
 the protocol correctly. So this looks like stale data in the cdn cache.

 -- 
 -- 
                                 Michael van Elst
 Internet: mlelstv@serpens.de
                                 "A potential Snark may lurk in every tree."

From: coypu@sdf.org
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: misc/54811: https lost crossing to nyftp
Date: Sat, 11 Apr 2020 12:56:43 +0000

 This is still an issue a few months later, I suspect the cache has been
 updated since.

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: misc/54811: https lost crossing to nyftp
Date: Wed, 9 Jun 2021 01:49:38 +0000

 On Tue, Dec 31, 2019 at 02:25:00AM +0000, dholland@NetBSD.org wrote:
  > At https://cdn.netbsd.org/pub/, the link for NetBSD-daily is
  > https://cdn.netbsd.org/pub/NetBSD-daily/, which is great, but opening
  > it redirects to http://nycdn.netbsd.org/pub/NetBSD-daily/, without
  > https, which is not good at all given that this is where one goes to
  > download things.
  > 
  > Better to always redirect to https if it can't match from the input
  > request.

 Still happening, btw.

 -- 
 David A. Holland
 dholland@netbsd.org

Home	PR Database Search