Devuan bug report logs - #124
https-uris don't work for ascii-security and jessie-securiy

Package: apt; Maintainer for apt is Andreas Messer <>;

Reported by: Harald Hellmuth <>

Date: Sun, 23 Jul 2017 07:03:01 UTC

Severity: normal

Tags: ascii, jessie

Done: KatolaZ <>

Full log

Message #5 received at (full text, mbox, reply):

Received: (at submit) by; 23 Jul 2017 06:50:06 +0000
Return-Path: <>
Received: from []
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Sun, 23 Jul 2017 08:50:06 +0200 (CEST)
Received: from ( [])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by (Postfix) with ESMTPS id 6AA1F18AE7E
	for <>; Sun, 23 Jul 2017 06:41:58 +0000 (UTC)
Received: from [] ( [])
	by (Postfix) with ESMTPSA id 905B541119C
	for <>; Sun, 23 Jul 2017 08:41:56 +0200 (CEST)
From: Harald Hellmuth <>
Subject: https-uris don't work for ascii-security and jessie-securiy
Message-ID: <>
Date: Sun, 23 Jul 2017 08:41:00 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
X-Spam-Status: No, score=0.0 required=5.0 tests=RCVD_IN_DNSWL_NONE
	autolearn=disabled version=3.4.0
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on tupac2
[Message part 1 (text/plain, inline)]
Package: apt
  Version: 1.4.7

After replacing all http with their https counterparts in my sources list and
installing apt-transport-https apt complains about forbidden redirect to http:

Err:5 ascii-security Release
  Redirection from https to
'' is forbidden

The problem seems to be the same for jessie-security uris and server related:

$ curl -I

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.9.9
Date: Sun, 23 Jul 2017 06:37:21 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive

other uris in sources list (<dist>, <dist>-updates) are working as exected.

Kind regards

Harald Hellmuth

Harald Hellmuth

[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.

Devuan Bugs Owner <>.
Last modified: Tue Jul 14 03:48:21 2020;