helpSavannah Administration - Support: sr #109219, When downloading from HTTPS, user...


sr #109219: When downloading from HTTPS, user should not be redirected to HTTP mirrors

Submitted by:  Luke <gaming4jc>
Submitted on:  Sat Jan 14 03:15:23 2017  
Category: Savannah websitePriority: 5 - Normal
Severity: 4 - ImportantStatus: None
Assigned to: Assaf Gordon <agn>Operating System: None
Open/Closed: Open

Add a New Comment (Rich MarkupRich Markup):

You are not logged in

Please log in, so followups can be emailed to you.


Sat Jan 14 03:24:57 2017, comment #1:


Thanks for raising this issue.

We are in the process of migrating savannah's servers to new VMs,
and the mirrors will be part of this migration.

The mirroring mechanism is being rewritten, so I'll definitely keep this in mind and hope to have it working properly on the new servers.

- assaf

Assaf Gordon <agn>
Site AdministratorIn charge of this item.
Sat Jan 14 03:15:23 2017, original submission:

I am attempting to download from HTTPS. However, when I try to reach any project I am redirected to a number of random mirrors.

Take for example:

Most of these mirrors are running http. This is not good for security, especially on public networks.

I see several solutions to this problem.
1) Rewrite rule, if user is coming from HTTPS, send to HTTPS (would break mirrors without HTTPS support)
2) Enforce an HTTPS policy across mirrors

Luke <gaming4jc>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by agn (Posted a comment)
  • -unavailable- added by gaming4jc (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat Jan 14 03:24:57 2017agnAssigned toNone=>agn

    Back to the top

    Powered by Savane 3.1-cleanup1