[jira] [Commented] (INFRA-10986) nexus repo redirects from https to http when adding trailing /

["Steve Loughran (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-10986?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15067119#comment-15067119 ] 

Steve Loughran commented on INFRA-10986:
----------------------------------------

Curl shows the issue in detail
{code}

$ curl -v  https://repository.apache.org/content/repositories/orgapacheslider-1010
*   Trying 140.211.11.112...
* Connected to repository.apache.org (140.211.11.112) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
* Server certificate: *.apache.org
* Server certificate: Symantec Class 3 Secure Server CA - G4
* Server certificate: VeriSign Class 3 Public Primary Certification Authority - G5
> GET /content/repositories/orgapacheslider-1010 HTTP/1.1
> Host: repository.apache.org
> User-Agent: curl/7.43.0
> Accept: */*
>
< HTTP/1.1 302 Found
< Date: Mon, 21 Dec 2015 21:45:48 GMT
< Server: Nexus/2.11.1-01
< X-Frame-Options: SAMEORIGIN
< X-Content-Type-Options: nosniff
< Accept-Ranges: bytes
< Location: http://repository.apache.org/content/repositories/orgapacheslider-1010/
< Content-Length: 0
< Set-Cookie: rememberMe=deleteMe; Path=/; Max-Age=0; Expires=Sun, 20-Dec-2015 21:45:48 GMT
< Via: 1.1 repository.apache.org
< Connection: close
<
* Closing connection 0
{code}

> nexus repo redirects from https to http when adding trailing /
> --------------------------------------------------------------
>
>                 Key: INFRA-10986
>                 URL: https://issues.apache.org/jira/browse/INFRA-10986
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Nexus
>            Reporter: Steve Loughran
>
> I'm fully automating the slider release process, including D/L and validation of all staged artifacts
> My build is currently failing as it's rejecting the redirect from secure to insecure
> {code}
>       [get] To: /Users/stevel/Projects/slider/target/get/orgapacheslider-1010
>       [get] https://repository.apache.org/content/repositories/orgapacheslider-1010 moved to http://repository.apache.org/content/repositories/orgapacheslider-1010/
> {code}
> it looks like if you do a GET on a repository without the trailing /, you get redirected to the insecure http path plus that trailing /



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)