You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@netbeans.apache.org by Laszlo Kishalmi <la...@gmail.com> on 2020/08/05 00:40:37 UTC

Update Center Issue with Apache NetBeans 12.0-u1

Dear all,

I had briefly activated, then rolled back the update center for 12.0-u1 
as it seems we have a HTTPS -> HTTP redirection.

Reading URL 
https://netbeans.apache.org/nb/updates/12.0/licenses/E9FD76FC.license 
failed (java.io.IOException: Redirect from secure URL 
'https://www.apache.org/dyn/closer.lua?action=download&filename=netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license' 
to 
'http://apache.spinellicreations.com/netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license' 
blocked.

So in this case the closer.lua is redirecting our HTTPS request to a 
HTTP mirror. I tried to google, but couldn't find if it is possible to 
force retrieve a HTTPS mirror.

Unfortunately some of the mirrors does not even support https.

I asked infra, if is that possible to force https download, I've got the 
following answer:

Hi @Laszlo Kishalmi <https://the-asf.slack.com/team/UN8AWCVL3> I dont 
think so, yet, but due to browser updates, we were planning on making 
https only mirrors come up as the recommended mirrors, leaving http 
available still for manual choice

The big question is what should we do?



Re: Update Center Issue with Apache NetBeans 12.0-u1

Posted by Neil C Smith <ne...@apache.org>.
On Wed, 5 Aug 2020 at 08:54, Laszlo Kishalmi <la...@gmail.com> wrote:
> I hope that the infra team would not mind if we
> are serving the licenses from the netbeans-vm, it should not generate
> that much traffic as used during updates only.

Glad it's working.  This shouldn't be a problem.  We serve the
updates.xml from there - this should be minimal on top of that!

Longer term be good to consider this whole architecture though,
particularly with more updates and archived releases - it's getting
more complex with odd edge cases.

> Announcement would happen after I got some sleep...

Enjoy the rest! :-)

Best wishes,

Neil

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists




Re: Update Center Issue with Apache NetBeans 12.0-u1

Posted by Laszlo Kishalmi <la...@gmail.com>.
On 8/4/20 11:43 PM, Neil C Smith wrote:
> On Wed, 5 Aug 2020, 01:40 Laszlo Kishalmi, <la...@gmail.com>
> wrote:
>
>> I had briefly activated, then rolled back the update center for 12.0-u1
>> as it seems we have a HTTPS -> HTTP redirection.
>>
>> Reading URL
>> https://netbeans.apache.org/nb/updates/12.0/licenses/E9FD76FC.license
>> failed (java.io.IOException: Redirect from secure URL
>> '
>> https://www.apache.org/dyn/closer.lua?action=download&filename=netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license'
>>
>> to
>> '
>> http://apache.spinellicreations.com/netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license'
>>
>> blocked.
>>
> The https to http redirect is expected. The trusted update centre code is
> meant to handle this - it's one reason for the hashes. I wonder if the
> license related code is doing though? Maybe Matthias has a thought on this?

Good catch it is just the license code. I've exported the licenses 
folder from 12.0 subversion dist folder, then tweaked the .htaccess file 
a bit.

It seems I was able to update my vanilla 12.0 from the official UC. 
Well, I leave that on. I hope that the infra team would not mind if we 
are serving the licenses from the netbeans-vm, it should not generate 
that much traffic as used during updates only. Announcement would happen 
after I got some sleep...


>
> Obvious option would be to serve those files direct from dist, or on the VM?
>
> Best wishes,
>
> Neil
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@netbeans.apache.org
For additional commands, e-mail: dev-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists




Re: Update Center Issue with Apache NetBeans 12.0-u1

Posted by Neil C Smith <ne...@apache.org>.
On Wed, 5 Aug 2020, 01:40 Laszlo Kishalmi, <la...@gmail.com>
wrote:

> I had briefly activated, then rolled back the update center for 12.0-u1
> as it seems we have a HTTPS -> HTTP redirection.
>
> Reading URL
> https://netbeans.apache.org/nb/updates/12.0/licenses/E9FD76FC.license
> failed (java.io.IOException: Redirect from secure URL
> '
> https://www.apache.org/dyn/closer.lua?action=download&filename=netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license'
>
> to
> '
> http://apache.spinellicreations.com/netbeans/netbeans/12.0/nbms/licenses/E9FD76FC.license'
>
> blocked.
>

The https to http redirect is expected. The trusted update centre code is
meant to handle this - it's one reason for the hashes. I wonder if the
license related code is doing though? Maybe Matthias has a thought on this?

Obvious option would be to serve those files direct from dist, or on the VM?

Best wishes,

Neil

>