http/https mirrors with expired certificate is written to mirrorlist as https #138

New issue

Closed

opened 2018-07-21 14:12:51 +00:00 by ghost · 7 comments

ghost commented

2018-07-21 14:12:51 +00:00

(Migrated from gitlab2.manjaro.org)

https://forum.manjaro.org/t/testing-update-2018-07-21-browsers-pamac-cli-deepin-gnome-lvm2-php/52833/12?u=fhdk

As pacman-mirrors probes the mirrors it loops the available protocols which has been sorted in decending order so it probes https first and secondly http etc.

The first probe assign the mirror a response time of 99.99 to the https protocol but as the subsequent probe on the http protocol returns a valid response within the alotted time the mirror now gets the new response time of s.mss.

When the mirrors is written to the mirrorlist - again https is proritized over http and since the mirror now has a valid reponse time the https protocol is written to the mirror list.

The behavior is expected - what is not expected is a mirror to have an expired certificate, which in this case results in undesired behavior.

https://forum.manjaro.org/t/testing-update-2018-07-21-browsers-pamac-cli-deepin-gnome-lvm2-php/52833/12?u=fhdk As pacman-mirrors probes the mirrors it loops the available protocols which has been sorted in decending order so it probes https first and secondly http etc. The first probe assign the mirror a response time of 99.99 to the https protocol but as the subsequent probe on the http protocol returns a valid response within the alotted time the mirror now gets the new response time of s.mss. When the mirrors is written to the mirrorlist - again https is proritized over http and since the mirror now has a valid reponse time the https protocol is written to the mirror list. The behavior is expected - what is not expected is a mirror to have an expired certificate, which in this case results in undesired behavior.

ghost commented

2018-07-22 10:02:13 +00:00

(Migrated from gitlab2.manjaro.org)

mentioned in commit 331081c42f

mentioned in commit 331081c42f329de8b8a6ffc2d3f3b733ee57a103

ghost commented

2018-07-22 10:04:57 +00:00

(Migrated from gitlab2.manjaro.org)

mentioned in commit f3e8b15978

mentioned in commit f3e8b159789956355652a7a66942d096557ccf3b

ghost commented

2018-07-22 10:46:33 +00:00