Command line curl does not seem to be affected:
``` nico@nico-lenovo-ubuntu:~$ curl -L -vvv http://kxstudio.linuxaudio.org/repo/pool/free/ardour4_4.7.0-1kxstudio1_i386.deb -o ardour.deb % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 198.82.152.114... * Connected to kxstudio.linuxaudio.org (198.82.152.114) port 80 (#0) > GET /repo/pool/free/ardour4_4.7.0-1kxstudio1_i386.deb HTTP/1.1 > Host: kxstudio.linuxaudio.org > User-Agent: curl/7.50.1 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Thu, 22 Dec 2016 21:45:57 GMT < Server: Apache < Location: https://github.com/KXStudio/Repository/releases/download/initial/ardour4_4.7.0-1kxstudio1_i386.deb < Vary: Accept-Encoding < Content-Length: 379 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body { [379 bytes data] 100 379 100 379 0 0 1029 0 --:--:-- --:--:-- --:--:-- 1029 * Connection #0 to host kxstudio.linuxaudio.org left intact * Issue another request to this URL: 'https://github.com/KXStudio/Repository/releases/download/initial/ardour4_4.7.0-1kxstudio1_i386.deb' * Trying 192.30.253.113... * Connected to github.com (192.30.253.113) port 443 (#1) * found 173 certificates in /etc/ssl/certs/ca-certificates.crt * found 697 certificates in /etc/ssl/certs * ALPN, offering http/1.1 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate verification OK * server certificate status verification SKIPPED * common name: github.com (matched) * server certificate expiration date OK * server certificate activation date OK * certificate public key: RSA * certificate version: #3 * subject: * start date: Thu, 10 Mar 2016 00:00:00 GMT * expire date: Thu, 17 May 2018 12:00:00 GMT * issuer: C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert SHA2 Extended Validation Server CA * compression: NULL * ALPN, server accepted to use http/1.1 > GET /KXStudio/Repository/releases/download/initial/ardour4_4.7.0-1kxstudio1_i386.deb HTTP/1.1 > Host: github.com > User-Agent: curl/7.50.1 > Accept: */* > < HTTP/1.1 302 Found < Server: GitHub.com < Date: Thu, 22 Dec 2016 21:45:58 GMT < Content-Type: text/html; charset=utf-8 < Transfer-Encoding: chunked < Status: 302 Found < Cache-Control: no-cache < Vary: X-PJAX < Location: https://github-cloud.s3.amazonaws.com/releases/39372848/4074c29a-d734-11e5-8632-2259aafc2c91.deb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAISTNZFOVBIJMK3TQ%2F20161222%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20161222T214558Z&X-Amz-Expires=300&X-Amz-Signature=c42514a341b5775702cfa0e797d09d3ae3388257c936128fe26809f1ac04018f&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Dardour4_4.7.0-1kxstudio1_i386.deb&response-content-type=application%2Foctet-stream < X-UA-Compatible: IE=Edge,chrome=1 < Set-Cookie: logged_in=no; domain=.github.com; path=/; expires=Mon, 22 Dec 2036 21:45:58 -0000; secure; HttpOnly < Set-Cookie: _gh_sess=eyJzZXNzaW9uX2lkIjoiZDM2NmQ1ZDkxMTYwZjY2MDhjMGQ4YmRlMTYwMjhlNTYiLCJzcHlfcmVwbyI6IktYU3R1ZGlvL1JlcG9zaXRvcnkiLCJzcHlfcmVwb19hdCI6MTQ4MjQ0MzE1OH0%3D--ecb6bf45be2649d7c68cea7bbdec7881509454a0; path=/; secure; HttpOnly < X-Request-Id: cd4b2bde1903f54800cd6ab53b385d3a < X-Runtime: 0.022819 < Content-Security-Policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src render.githubusercontent.com; connect-src 'self' uploads.github.com status.github.com collector.githubapp.com api.github.com www.google-analytics.com github-cloud.s3.amazonaws.com wss://live.github.com; font-src assets-cdn.github.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com; img-src 'self' data: assets-cdn.github.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com *.githubusercontent.com; media-src 'none'; script-src assets-cdn.github.com; style-src 'unsafe-inline' assets-cdn.github.com < Strict-Transport-Security: max-age=31536000; includeSubdomains; preload < Public-Key-Pins: max-age=5184000; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="RRM1dGqnDFsCJXBTHky16vi1obOlCgFFn/yOhI/y+ho="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q="; pin-sha256="IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4="; pin-sha256="iie1VXtL7HzAMF+/PVPR9xzT80kQxdZeJ+zduCB3uj0="; pin-sha256="LvRiGEjRqfzurezaWuj8Wie2gyHMrW5Q06LspMnox7A="; includeSubDomains < X-Content-Type-Options: nosniff < X-Frame-Options: deny < X-XSS-Protection: 1; mode=block < Vary: Accept-Encoding < X-Served-By: 9e87b28fb3a65e563c8d72545356c3e0 < X-GitHub-Request-Id: 4D62FBED:5067:CCBC7B0:585C4996 < * Ignoring the response-body { [622 bytes data] 100 610 0 610 0 0 468 0 --:--:-- 0:00:01 --:--:-- 871 * Connection #1 to host github.com left intact * Issue another request to this URL: 'https://github-cloud.s3.amazonaws.com/releases/39372848/4074c29a-d734-11e5-8632-2259aafc2c91.deb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAISTNZFOVBIJMK3TQ%2F20161222%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20161222T214558Z&X-Amz-Expires=300&X-Amz-Signature=c42514a341b5775702cfa0e797d09d3ae3388257c936128fe26809f1ac04018f&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Dardour4_4.7.0-1kxstudio1_i386.deb&response-content-type=application%2Foctet-stream' * Trying 54.231.81.80... * Connected to github-cloud.s3.amazonaws.com (54.231.81.80) port 443 (#2) * found 173 certificates in /etc/ssl/certs/ca-certificates.crt * found 697 certificates in /etc/ssl/certs * ALPN, offering http/1.1 0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256 * server certificate verification OK * server certificate status verification SKIPPED * common name: *.s3.amazonaws.com (matched) * server certificate expiration date OK * server certificate activation date OK * certificate public key: RSA * certificate version: #3 * subject: C=US,ST=Washington,L=Seattle,O=Amazon.com Inc.,CN=*.s3.amazonaws.com * start date: Fri, 29 Jul 2016 00:00:00 GMT * expire date: Wed, 29 Nov 2017 12:00:00 GMT * issuer: C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert Baltimore CA-2 G2 * compression: NULL * ALPN, server did not agree to a protocol > GET /releases/39372848/4074c29a-d734-11e5-8632-2259aafc2c91.deb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAISTNZFOVBIJMK3TQ%2F20161222%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20161222T214558Z&X-Amz-Expires=300&X-Amz-Signature=c42514a341b5775702cfa0e797d09d3ae3388257c936128fe26809f1ac04018f&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3B%20filename%3Dardour4_4.7.0-1kxstudio1_i386.deb&response-content-type=application%2Foctet-stream HTTP/1.1 > Host: github-cloud.s3.amazonaws.com > User-Agent: curl/7.50.1 > Accept: */* > < HTTP/1.1 200 OK < x-amz-id-2: jgftd3KO43W9MqQRkaXxZQj/9CHRvJcMQtqke6185CND77T3zmAov5yolBYJa70pmzfrvIaQsEk= < x-amz-request-id: 763EFA47B3F85EAB < Date: Thu, 22 Dec 2016 21:46:00 GMT < Last-Modified: Fri, 19 Feb 2016 17:11:54 GMT < ETag: "abb6b1bf10a5c1e30c367ed9c7517e7d" < Content-Disposition: attachment; filename=ardour4_4.7.0-1kxstudio1_i386.deb < Accept-Ranges: bytes < Content-Type: application/octet-stream < Content-Length: 60151504 < Server: AmazonS3 < { [16360 bytes data] 100 57.3M 100 57.3M 0 0 2212k 0 0:00:26 0:00:26 --:--:-- 2514k * Connection #2 to host github-cloud.s3.amazonaws.com left intact ```
Command line curl does not seem to be affected:
``` lenovo- ubuntu: ~$ curl -L -vvv http:// kxstudio. linuxaudio. org/repo/ pool/free/ ardour4_ 4.7.0-1kxstudio 1_i386. deb -o ardour.deb
Dload Upload Total Spent Left Speed linuxaudio. org (198.82.152.114) port 80 (#0) free/ardour4_ 4.7.0-1kxstudio 1_i386. deb HTTP/1.1 linuxaudio. org /github. com/KXStudio/ Repository/ releases/ download/ initial/ ardour4_ 4.7.0-1kxstudio 1_i386. deb linuxaudio. org left intact /github. com/KXStudio/ Repository/ releases/ download/ initial/ ardour4_ 4.7.0-1kxstudio 1_i386. deb' certs/ca- certificates. crt AES_128_ GCM_SHA256 www.digicert. com,CN= DigiCert SHA2 Extended Validation Server CA Repository/ releases/ download/ initial/ ardour4_ 4.7.0-1kxstudio 1_i386. deb HTTP/1.1 /github- cloud.s3. amazonaws. com/releases/ 39372848/ 4074c29a- d734-11e5- 8632-2259aafc2c 91.deb? X-Amz-Algorithm =AWS4-HMAC- SHA256& X-Amz-Credentia l=AKIAISTNZFOVB IJMK3TQ% 2F20161222% 2Fus-east- 1%2Fs3% 2Faws4_ request& X-Amz-Date= 20161222T214558 Z&X-Amz- Expires= 300&X-Amz- Signature= c42514a341b5775 702cfa0e797d09d 3ae3388257c9361 28fe26809f1ac04 018f&X- Amz-SignedHeade rs=host& actor_id= 0&response- content- disposition= attachment% 3B%20filename% 3Dardour4_ 4.7.0-1kxstudio 1_i386. deb&response- content- type=applicatio n%2Foctet- stream eyJzZXNzaW9uX2l kIjoiZDM2NmQ1ZD kxMTYwZjY2MDhjM GQ4YmRlMTYwMjhl NTYiLCJzcHlfcmV wbyI6IktYU3R1ZG lvL1JlcG9zaXRvc nkiLCJzcHlfcmVw b19hdCI6MTQ4MjQ 0MzE1OH0% 3D--ecb6bf45be2 649d7c68cea7bbd ec7881509454a0; path=/; secure; HttpOnly 800cd6ab53b385d 3a Security- Policy: default-src 'none'; base-uri 'self'; block-all- mixed-content; child-src render. githubuserconte nt.com; connect-src 'self' uploads.github.com status.github.com collector. githubapp. com api.github.com www.google- analytics. com github- cloud.s3. amazonaws. com wss://live. github. com; font-src assets- cdn.github. com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render. githubuserconte nt.com; img-src 'self' data: assets- cdn.github. com identicons. github. com collector. githubapp. com github- cloud.s3. amazonaws. com *.githubusercon tent.com; media-src 'none'; script-src assets- cdn.github. com; style-src 'unsafe-inline' assets- cdn.github. com Transport- Security: max-age=31536000; includeSubdomains; preload "WoiWRyIOVNa9ih aBciRSC7XHjliYS 9VwUGOIud4PB18= "; pin-sha256= "RRM1dGqnDFsCJX BTHky16vi1obOlC gFFn/yOhI/ y+ho="; pin-sha256= "k2v657xBsOVe1P QRwOsHsw3bsGT2V zIqz5K+ 59sNQws= "; pin-sha256= "K87oWBWM9UZfyd dvDfoxL+ 8lpNyoUB2ptGtn0 fv6G2Q= "; pin-sha256= "IQBnNBEiFuhj+ 8x6X8XLgh01V9Ic 5/V3IRQLNFFc7v4 ="; pin-sha256= "iie1VXtL7HzAMF +/PVPR9xzT80kQx dZeJ+zduCB3uj0= "; pin-sha256= "LvRiGEjRqfzure zaWuj8Wie2gyHMr W5Q06LspMnox7A= "; includeSubDomains Type-Options: nosniff 63c8d72545356c3 e0 Request- Id: 4D62FBED: 5067:CCBC7B0: 585C4996 /github- cloud.s3. amazonaws. com/releases/ 39372848/ 4074c29a- d734-11e5- 8632-2259aafc2c 91.deb? X-Amz-Algorithm =AWS4-HMAC- SHA256& X-Amz-Credentia l=AKIAISTNZFOVB IJMK3TQ% 2F20161222% 2Fus-east- 1%2Fs3% 2Faws4_ request& X-Amz-Date= 20161222T214558 Z&X-Amz- Expires= 300&X-Amz- Signature= c42514a341b5775 702cfa0e797d09d 3ae3388257c9361 28fe26809f1ac04 018f&X- Amz-SignedHeade rs=host& actor_id= 0&response- content- disposition= attachment% 3B%20filename% 3Dardour4_ 4.7.0-1kxstudio 1_i386. deb&response- content- type=applicatio n%2Foctet- stream' cloud.s3. amazonaws. com (54.231.81.80) port 443 (#2) certs/ca- certificates. crt AES_128_ GCM_SHA256 Washington, L=Seattle, O=Amazon. com Inc.,CN= *.s3.amazonaws. com www.digicert. com,CN= DigiCert Baltimore CA-2 G2 39372848/ 4074c29a- d734-11e5- 8632-2259aafc2c 91.deb? X-Amz-Algorithm =AWS4-HMAC- SHA256& X-Amz-Credentia l=AKIAISTNZFOVB IJMK3TQ% 2F20161222% 2Fus-east- 1%2Fs3% 2Faws4_ request& X-Amz-Date= 20161222T214558 Z&X-Amz- Expires= 300&X-Amz- Signature= c42514a341b5775 702cfa0e797d09d 3ae3388257c9361 28fe26809f1ac04 018f&X- Amz-SignedHeade rs=host& actor_id= 0&response- content- disposition= attachment% 3B%20filename% 3Dardour4_ 4.7.0-1kxstudio 1_i386. deb&response- content- type=applicatio n%2Foctet- stream HTTP/1.1 cloud.s3. amazonaws. com RkaXxZQj/ 9CHRvJcMQtqke61 85CND77T3zmAov5 yolBYJa70pmzfrv IaQsEk= e30c367ed9c7517 e7d" Disposition: attachment; filename= ardour4_ 4.7.0-1kxstudio 1_i386. deb octet-stream cloud.s3. amazonaws. com left intact
nico@nico-
% Total % Received % Xferd Average Speed Time Time Time Current
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Trying 198.82.152.114...
* Connected to kxstudio.
> GET /repo/pool/
> Host: kxstudio.
> User-Agent: curl/7.50.1
> Accept: */*
>
< HTTP/1.1 301 Moved Permanently
< Date: Thu, 22 Dec 2016 21:45:57 GMT
< Server: Apache
< Location: https:/
< Vary: Accept-Encoding
< Content-Length: 379
< Content-Type: text/html; charset=iso-8859-1
<
* Ignoring the response-body
{ [379 bytes data]
100 379 100 379 0 0 1029 0 --:--:-- --:--:-- --:--:-- 1029
* Connection #0 to host kxstudio.
* Issue another request to this URL: 'https:/
* Trying 192.30.253.113...
* Connected to github.com (192.30.253.113) port 443 (#1)
* found 173 certificates in /etc/ssl/
* found 697 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* SSL connection using TLS1.2 / ECDHE_RSA_
* server certificate verification OK
* server certificate status verification SKIPPED
* common name: github.com (matched)
* server certificate expiration date OK
* server certificate activation date OK
* certificate public key: RSA
* certificate version: #3
* subject:
* start date: Thu, 10 Mar 2016 00:00:00 GMT
* expire date: Thu, 17 May 2018 12:00:00 GMT
* issuer: C=US,O=DigiCert Inc,OU=
* compression: NULL
* ALPN, server accepted to use http/1.1
> GET /KXStudio/
> Host: github.com
> User-Agent: curl/7.50.1
> Accept: */*
>
< HTTP/1.1 302 Found
< Server: GitHub.com
< Date: Thu, 22 Dec 2016 21:45:58 GMT
< Content-Type: text/html; charset=utf-8
< Transfer-Encoding: chunked
< Status: 302 Found
< Cache-Control: no-cache
< Vary: X-PJAX
< Location: https:/
< X-UA-Compatible: IE=Edge,chrome=1
< Set-Cookie: logged_in=no; domain=.github.com; path=/; expires=Mon, 22 Dec 2036 21:45:58 -0000; secure; HttpOnly
< Set-Cookie: _gh_sess=
< X-Request-Id: cd4b2bde1903f54
< X-Runtime: 0.022819
< Content-
< Strict-
< Public-Key-Pins: max-age=5184000; pin-sha256=
< X-Content-
< X-Frame-Options: deny
< X-XSS-Protection: 1; mode=block
< Vary: Accept-Encoding
< X-Served-By: 9e87b28fb3a65e5
< X-GitHub-
<
* Ignoring the response-body
{ [622 bytes data]
100 610 0 610 0 0 468 0 --:--:-- 0:00:01 --:--:-- 871
* Connection #1 to host github.com left intact
* Issue another request to this URL: 'https:/
* Trying 54.231.81.80...
* Connected to github-
* found 173 certificates in /etc/ssl/
* found 697 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0* SSL connection using TLS1.2 / ECDHE_RSA_
* server certificate verification OK
* server certificate status verification SKIPPED
* common name: *.s3.amazonaws.com (matched)
* server certificate expiration date OK
* server certificate activation date OK
* certificate public key: RSA
* certificate version: #3
* subject: C=US,ST=
* start date: Fri, 29 Jul 2016 00:00:00 GMT
* expire date: Wed, 29 Nov 2017 12:00:00 GMT
* issuer: C=US,O=DigiCert Inc,OU=
* compression: NULL
* ALPN, server did not agree to a protocol
> GET /releases/
> Host: github-
> User-Agent: curl/7.50.1
> Accept: */*
>
< HTTP/1.1 200 OK
< x-amz-id-2: jgftd3KO43W9MqQ
< x-amz-request-id: 763EFA47B3F85EAB
< Date: Thu, 22 Dec 2016 21:46:00 GMT
< Last-Modified: Fri, 19 Feb 2016 17:11:54 GMT
< ETag: "abb6b1bf10a5c1
< Content-
< Accept-Ranges: bytes
< Content-Type: application/
< Content-Length: 60151504
< Server: AmazonS3
<
{ [16360 bytes data]
100 57.3M 100 57.3M 0 0 2212k 0 0:00:26 0:00:26 --:--:-- 2514k
* Connection #2 to host github-
```