https redirects pose download problem

Bug #174186 reported by Steve McMahon on 2007-12-05
14
Affects Status Importance Assigned to Milestone
Launchpad itself
Undecided
Unassigned

Bug Description

The project I'm working with (Plone) needs to have downloads available via http (not just https), and I'll bet others will also.

Why?

1) Some users will be downloading with tools like wget that may not have ssl libraries in all builds;

2) Automated build mechanisms may not have ssl available.

Sidnei da Silva (sidnei) wrote :

This is a bug on Launchpad Downloads, not on Launchpad Bugs (malone).

Changed in malone:
status: New → Invalid
Diogo Matsubara (matsubara) wrote :

Brad will follow up with this. I'm setting as Incomplete for now because it needs some discussion about infrastructure changes before any action can be taken to fix it.

Changed in launchpad:
status: New → Incomplete
Diogo Matsubara (matsubara) wrote :

Sorry, setting it as confirmed as we acknowledge this is a problem but it needs discussion about a proper solution.

Changed in launchpad:
status: Incomplete → Confirmed
Martin Pool (mbp) wrote :

This may be an issue for Bazaar use of Launchpad too.

I poked around a bit.

The downloads are ultimately served from launchpadlibrarian.net, which does happily serve http urls, eg. http://launchpadlibrarian.net/11342645/bzr-1.1.tar.gz.asc

However, the release download page <https://edge.launchpad.net/bzr/1.1/1.1> relies on https in 3 ways:

1- this page is served on https only. (Not a problem if the urls are copied to an external project web site available on http.)

2- this page points to eg <https://edge.launchpad.net/bzr/1.1/1.1/+download/bzr-1.1.tar.gz.asc> which is only available on https.

3- that location redirects to an https url on lpl.net.

Brad Crittenden (bac) wrote :

Martin's analysis is correct except for a typo in point 3 -- the location ultimately redirects to a http url on launchpadlibrarian.net.

Changed in launchpad:
assignee: nobody → bradcrittenden

On 16/02/2008, Brad Crittenden <email address hidden> wrote:
> Martin's analysis is correct except for a typo in point 3 -- the
> location ultimately redirects to a http url on launchpadlibrarian.net.

I was abbreviating, crptcly :)

--
Martin

Brad Crittenden (bac) on 2008-02-21
Changed in launchpad:
importance: Undecided → High
milestone: none → 1.2.3
Brad Crittenden (bac) wrote :

Code fix committed in RF 5776.
Changes to Apache rules are still required.

Changed in launchpad:
status: Confirmed → In Progress
Brad Crittenden (bac) wrote :

An even better fix landed in RF 5876.

Changed in launchpad:
status: In Progress → Fix Committed
Brad Crittenden (bac) on 2008-04-03
Changed in launchpad:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Related questions