Official Vagrant images get downloaded using http://

Bug #1754948 reported by Andreas Olsson
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
cloud-images
Medium
Unassigned

Bug Description

When using Vagrant to download the official Ubuntu images from Vagrant cloud it *looks* like they are securely downloaded using https://.

Downloading: https://vagrantcloud.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box

Except that behind the scenes we end up being redirected to a http:// download.

What ends up happening is that https://vagrantcloud.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box redirects to https://app.vagrantup.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box which redirects to http://cloud-images.ubuntu.com/xenial/current/xenial-server-cloudimg-amd64-vagrant.box

Likely/hopefully an easy fix, given that https://cloud-images.ubuntu.com/ at least nowdays is available by way of https://.

Dan Watkins (oddbloke)
Changed in cloud-images:
importance: Undecided → Medium
status: New → Triaged
Revision history for this message
Joshua Powers (powersj) wrote :

Hi,

Going through old bugs to check in on status.

I can confirm that the latest images now have https as the default in the download URLs. While the older URLs will continue to work and use HTTP, all new requests should use HTTPS going forward. As such I am marking this as 'Fix Released'.

If you disagree, please do feel free to follow-up in the bug here with additional notes or logs. Thanks!

Changed in cloud-images:
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers