Official Vagrant images get downloaded using http://

[Andreas Olsson]

When using Vagrant to download the official Ubuntu images from Vagrant cloud it *looks* like they are securely downloaded using https://.

Downloading: https://vagrantcloud.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box

Except that behind the scenes we end up being redirected to a http:// download.

What ends up happening is that https://vagrantcloud.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box redirects to https://app.vagrantup.com/ubuntu/boxes/xenial64/versions/20180309.0.0/providers/virtualbox.box which redirects to http://cloud-images.ubuntu.com/xenial/current/xenial-server-cloudimg-amd64-vagrant.box

Likely/hopefully an easy fix, given that https://cloud-images.ubuntu.com/ at least nowdays is available by way of https://.

[Joshua Powers (powersj)]

Hi,

Going through old bugs to check in on status.

I can confirm that the latest images now have https as the default in the download URLs. While the older URLs will continue to work and use HTTP, all new requests should use HTTPS going forward. As such I am marking this as 'Fix Released'.

If you disagree, please do feel free to follow-up in the bug here with additional notes or logs. Thanks!