packages.debian.org: Cannot download package source files due to mixed content URL

Boyuan Yang <[email protected]> Fri, 30 Jun 2023 11:15:13 -0400

Newsgroups	gmane.linux.debian.devel.www
Message-ID	<[email protected]>

Package: www.debian.org
Severity: normal

Converting the email to a bug report.

Thanks,
Boyuan Yang


在 2023-06-26星期一的 17:45 -0700，John Horigan写道：
> I tried to download the the source files and debian files for source package
> agg, but Chrome blocked the downloads with this message on the error
> console:
> 
> > Mixed Content: The site at 'https://packages.debian.org/' was loaded over
> > a secure connection, but the file at
> > 'https://deb.debian.org/debian/pool/main/a/agg/agg_2.6.1-r134+dfsg1-2.debi
> > an.tar.xz' was redirected through an insecure connection. This file should
> > be served over HTTPS. This download has been blocked. See
> > https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for
> > more details.
> 
> 
> The problem appears to be that the download links at the bottom of the
> source page https://packages.debian.org/source/trixie/agg use http: instead
> of https:. Clicking on these insecure links results in a 307 temporary
> redirect to the corresponding secure link. Chrome seems to block secure
> pages with insecure links that redirect to secure locations. The source page
> should have secure links.
> 
> -- john

signature.asc (application/pgp-signature, 833 B)