Date: Sun, 17 May 2020 22:27:21 +0200
From: Wolf <wolf@wolfsden.cz>
To: Ariadne Conill <ariadne@dereferenced.org>
Cc: ~alpine/users@lists.alpinelinux.org
Subject: Re: Are the repos/apk using http or https?
Message-ID: <20200517202721.35yd24an5d3pgmnx@wolfsden.cz>
References: <CAESemU-1n6zA4WqB6ChebPyEKCtPpwTJDBU3hT-Au7urp+dxig@mail.gmail.com>
 <20200510161718.2b9d3b8985314c73486c1d17@gmail.com>
 <3414617.y9zrWrDLY7@localhost>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="o2yib33bkmgo37gx"
Content-Disposition: inline
In-Reply-To: <3414617.y9zrWrDLY7@localhost>


--o2yib33bkmgo37gx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

On 2020-05-10 21:04:15 -0600, Ariadne Conill wrote:
> I think, however, in 2020 it is probably a good idea to prefer https over=
 http=20
> mirrors.  A good solution would be to have two lists, and ask users if th=
ey=20
> wish to use an http or https update channel.

So is there any chance of dl-cdn.alpinelinux.org starting to work with
https? Or is that something that is not really doable?



Snippet from irc log for more context:

2020-05-06 14:53:23 <gray_-_wolf> is it expected that I cannot use https wi=
th dl-cdn.alpinelinux.org? (URL: https://dl-cdn.alpinelinux.org/alpine/v3.1=
1/main/x86_64/apk-tools-static-2.10.5-r0.apk )
2020-05-06 14:53:33 <gray_-_wolf> I'm getting curl: (51) SSL: certificate s=
ubject name (default.ssl.fastly.net) does not match target host name 'dl-cd=
n.alpinelinux.org'
2020-05-06 14:55:01 <ikke> yes
2020-05-06 14:55:21 <ikke> fastly is hosting it, and they don't have a cert=
ificate for dl-cdn.alpinelinux.org
2020-05-06 14:55:53 <ikke> gray_-_wolf: this one works: https://alpine.glob=
al.ssl.fastly.net/
2020-05-06 14:57:59 <gray_-_wolf> hm but as long as I'm checking the signat=
ure, I don't really need the https I guess?
2020-05-06 14:59:21 <ikke> not really, no



W.

--=20
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

--o2yib33bkmgo37gx
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=sMS9
-----END PGP SIGNATURE-----

--o2yib33bkmgo37gx--