Devuan bug report logs - #143
bugs.devuan.org sends queries for bug numbers etc. unencrypted

Package: reportbug; Reported by: Jens Korte <korte@mailbox.org>; Keywords: jessie ascii; Done: Mark Hindley <mark@hindley.org.uk>; Maintainer for reportbug is Devuan Developers <devuan-dev@lists.dyne.org>.

Message received at 143-done@bugs.devuan.org:


Received: (at 143-done) by bugs.devuan.org; 15 Jan 2020 16:20:04 +0000
Return-Path: <mark@hindley.org.uk>
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by doc.devuan.org with IMAP (fetchmail-6.4.0.beta4)
	for <debbugs@localhost> (single-drop); Wed, 15 Jan 2020 16:20:04 +0000 (UTC)
Received: from mx.hindley.org.uk (mohindley.plus.com [81.174.245.179])
	(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 21AF1F60C62
	for <143-done@bugs.devuan.org>; Wed, 15 Jan 2020 17:19:11 +0100 (CET)
Received: from apollo.hindleynet ([192.168.1.3] helo=apollo)
	by mx.hindley.org.uk with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.84_2)
	(envelope-from <mark@hindley.org.uk>)
	id 1irlNt-0007Nr-Mz
	for 143-done@bugs.devuan.org; Wed, 15 Jan 2020 16:19:09 +0000
Received: from mark by apollo with local (Exim 4.84_2)
	(envelope-from <mark@hindley.org.uk>)
	id 1irlNs-0002gf-Eo
	for 143-done@bugs.devuan.org; Wed, 15 Jan 2020 16:19:08 +0000
Date: Wed, 15 Jan 2020 16:19:08 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: 143-done@bugs.devuan.org
Subject: Re: merge close
Message-ID: <20200115161908.GA10307@hindley.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Debbugs-No-Ack: No Thanks
User-Agent: Mutt/1.5.23 (2014-03-12)
X-Spam-Status: No, score=0.0 required=5.0 tests=FAKE_REPLY_C,SPF_PASS
	autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on tupac3.dyne.org

Closing as was the intention of https://bugs.devuan.org//cgi/bugreport.cgi?bug=143#14

216 is assigned to infrastructure and is closed separately.

Mark

Notification sent to Jens Korte <korte@mailbox.org>:
bug acknowledged by developer. Full text available.
Reply sent to Mark Hindley <mark@hindley.org.uk>:
You have taken responsibility. Full text available.

Message received at 143@bugs.devuan.org:


Received: (at 143) by bugs.devuan.org; 10 Jun 2018 18:30:05 +0000
Return-Path: <korte@mailbox.org>
Delivered-To: devuanbugs@dyne.org
Received: from tupac3.dyne.org [195.169.149.119]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Sun, 10 Jun 2018 20:30:04 +0200 (CEST)
Received: from mx2.mailbox.org (mx2.mailbox.org [80.241.60.215])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by vm6.ganeti.dyne.org (Postfix) with ESMTPS id 81B09F608A1
	for <143@bugs.devuan.org>; Sun, 10 Jun 2018 20:22:46 +0200 (CEST)
Authentication-Results: vm6.ganeti.dyne.org;
	dkim=pass (2048-bit key; secure) header.d=mailbox.org header.i=@mailbox.org header.b="Up8UHpfl";
	dkim-atps=neutral
Received: from smtp2.mailbox.org (smtp2.mailbox.org [80.241.60.241])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mx2.mailbox.org (Postfix) with ESMTPS id C40474102C
	for <143@bugs.devuan.org>; Sun, 10 Jun 2018 20:20:37 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailbox.org; h=
	content-transfer-encoding:content-type:content-type:mime-version
	:message-id:subject:subject:from:from:date:date:received; s=
	mail20150812; t=1528654837; bh=NuIDsEleI8YT5ML1yKiQuu/cPjnieoaYB
	r/hZBFQfi4=; b=Up8UHpflsXIGWhkNvq1vD4qedqYsqtIWBVc7K7/cJf7+jGDLt
	p09iNHBsImMX0tIw5jGq8+D6tbt1VtmQHzP/F6/6w1iD9e/V697IHAYWuEczZd8W
	n1i9ACitRbwJoDR/Ht6OnuqqhgeXfc/4j44k11xy9x5gCH48G4BCrQfQutYfrVGb
	kEFyLftL2OUMNG6kxTqIZDUWYBU4BOofcnM8ayIwsgFEHEsAENm53FbkrXcEKiB7
	D0vQvRpG/rr8h68hUeFsqbiikv4djo3z7SYMuvSS2TVru/OPTF16QptbUgiU06aa
	c0ystkYuv+J8dvZV1yKRt3DxmdVDjmQwFCxQA==
X-Virus-Scanned: amavisd-new at heinlein-support.de
Received: from smtp2.mailbox.org ([80.241.60.241])
	by spamfilter02.heinlein-hosting.de (spamfilter02.heinlein-hosting.de [80.241.56.116]) (amavisd-new, port 10030)
	with ESMTP id lDHE3j0mFsRJ for <143@bugs.devuan.org>;
	Sun, 10 Jun 2018 20:20:37 +0200 (CEST)
Date: Sun, 10 Jun 2018 20:18:53 +0200
From: Jens Korte <korte@mailbox.org>
To: <143@bugs.devuan.org>
Subject: merge close
Message-ID: <20180610201853.1b73d3b4@x201>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_PASS autolearn=disabled
	version=3.4.1
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on tupac3.dyne.org

merge 143 216
close


Acknowledgement sent to Jens Korte <korte@mailbox.org>:
Extra info received and forwarded to list. Copy sent to KatolaZ <katolaz@freaknet.org>. Full text available.
Information forwarded to devuan-bugs@lists.dyne.org, KatolaZ <katolaz@freaknet.org>:
bug#143; Package reportbug. Full text available.
Tags added: jessie Request was from KatolaZ <katolaz@freaknet.org> to control@bugs.devuan.org. Full text available.
Tags added: ascii Request was from KatolaZ <katolaz@freaknet.org> to control@bugs.devuan.org. Full text available.

Message received at submit@bugs.devuan.org:


Received: (at submit) by bugs.devuan.org; 14 Sep 2017 20:10:03 +0000
Return-Path: <korte@mailbox.org>
Delivered-To: devuanbugs@dyne.org
Received: from mail.dyne.org [178.62.188.7]
	by fulcanelli with IMAP (fetchmail-6.3.26)
	for <debbugs@localhost> (single-drop); Thu, 14 Sep 2017 22:10:03 +0200 (CEST)
Received: from mx1.mailbox.org (mx1.mailbox.org [80.241.60.212])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by tupac2.dyne.org (Postfix) with ESMTPS id 185FE190B59
	for <submit@bugs.devuan.org>; Thu, 14 Sep 2017 20:03:26 +0000 (UTC)
Authentication-Results: tupac2.dyne.org; dkim=pass
	reason="2048-bit key; unprotected key"
	header.d=mailbox.org header.i=@mailbox.org header.b=m7yKsqE+;
	dkim-adsp=pass; dkim-atps=neutral
Received: from smtp1.mailbox.org (smtp1.mailbox.org [80.241.60.240])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mx1.mailbox.org (Postfix) with ESMTPS id CE35543D08
	for <submit@bugs.devuan.org>; Thu, 14 Sep 2017 22:03:25 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailbox.org; h=
	content-transfer-encoding:content-type:content-type:mime-version
	:message-id:subject:subject:from:from:date:date:received; s=
	mail20150812; t=1505419404; bh=ehiHoQfLRB1mv8gmcoOKrd57kZA9AOiZW
	wI1JWeFesM=; b=m7yKsqE+ABwCWZkLW0pfKW1+3FrVokhiScN4g904PjwVVEL2d
	ehgAPDVQt4fkt75f87pFTLExb/5YlPYOrW7vxestM3IoRIFYVR5QQGw1mqLKNqaQ
	DUTI56oawgnwA44hdnjqZtV8recATqu36qAS+Yn0EGyq1QvkWUQrePO9wch2HLiG
	Wb9tG4gUdPbt++fgOfKrZsIusNcxPz78G7UOFiWbBaxFqjTRZTL6RkW/e/d44VRa
	4AA3IueyGm3nE3pG/qKW7K1Pir00iL6f4jaICuLC1w+hmQew+gIQMHkVOsn/wH2M
	8Wl4CPzSisRVWFXodNYpA21mcrNJmUh4efmRQ==
X-Virus-Scanned: amavisd-new at heinlein-support.de
Received: from smtp1.mailbox.org ([80.241.60.240])
	by spamfilter03.heinlein-hosting.de (spamfilter03.heinlein-hosting.de [80.241.56.117]) (amavisd-new, port 10030)
	with ESMTP id Pylebhhbl9RG for <submit@bugs.devuan.org>;
	Thu, 14 Sep 2017 22:03:24 +0200 (CEST)
Date: Thu, 14 Sep 2017 22:02:48 +0200
From: Jens Korte <korte@mailbox.org>
To: submit@bugs.devuan.org
Subject: bugs.devuan.org sends queries for bug numbers etc. unencrypted
Message-ID: <20170914220248.03a899d8@j>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,RCVD_IN_DNSWL_LOW,RP_MATCHES_RCVD,SPF_PASS autolearn=disabled
	version=3.4.0
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on tupac2

package: reportbug
version: 0.42

This is not a bug in reportbug, I just know no better place to report
it.

If I enter a bug number e.g. 140 to https://bugs.devuan.org/ firefox
reports me, that the content is sent unecrypted, though I used https.
In the source of the page there is <form method="get"
action="http://bugs.devuan.org//cgi/bugreport.cgi">.

AFAIK the http://bugs.devuan.org/ should be remove
and /cgi/bugreport.cgi is enough. If you really want to, you can
enforce the usage of https by replacing http with https. There is
another line, where a get request with http is used.


Acknowledgement sent to Jens Korte <korte@mailbox.org>:
New bug report received and forwarded. Copy sent to KatolaZ <katolaz@freaknet.org>. Full text available.
Report forwarded to devuan-bugs@lists.dyne.org, KatolaZ <katolaz@freaknet.org>:
bug#143; Package reportbug. Full text available.

Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.

Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified: Mon, 25 May 2020 20:39:02 UTC