Subject: bug#124: https-uris don't work for ascii-security and jessie-securiy

From: Harald Hellmuth <[email-masked]>
Date: Sun, 23 Jul 2017 08:41:00 +0200

Package: apt
  Version: 1.4.7

After replacing all http with their https counterparts in my sources list and
installing apt-transport-https apt complains about forbidden redirect to http:

Err:5 https://auto.mirror.devuan.org/merged ascii-security Release
  Redirection from https to
'http://amprolla.devuan.org/merged/dists/ascii-security/Release' is forbidden

The problem seems to be the same for jessie-security uris and server related:

$ curl -I
https://auto.mirror.devuan.org/merged/dists/jessie-security/main/binary-amd64/Packages

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.9.9
Date: Sun, 23 Jul 2017 06:37:21 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location:
http://amprolla.devuan.org/merged/dists/jessie-security/main/binary-amd64/Packages

other uris in sources list (<dist>, <dist>-updates) are working as exected.

Kind regards

Harald Hellmuth

-- 
Harald Hellmuth
<[email-masked]>
pgp: https://backmuth.de/pgp/harald.asc