Bug#910941: apt-get changelog uses insecure HTTP for Debian

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#910941: apt-get changelog uses insecure HTTP for Debian
From: Ben Hutchings <ben@decadent.org.uk>
Date: Sat, 13 Oct 2018 17:06:37 +0100
Message-id: <[🔎] 153944679720.20479.8019804728995311734.reportbug@deadeye.wl.decadent.org.uk>
Reply-to: Ben Hutchings <ben@decadent.org.uk>, 910941@bugs.debian.org

Package: apt
Version: 1.7.0
Severity: normal

The default value of Acquire::Changelogs::URI::Origin::Debian is
"http://metadata.ftp-master.debian.org/changelogs/@CHANGEPATH@_changelog";.

Since metadata.ftp-master.debian.org supports HTTP-S and redirects to
the https: scheme, the URL should be changed to use it from the start.

Ben.

Reply to:

Follow-Ups:
- Bug#910941: apt-get changelog uses insecure HTTP for Debian
  - From: David Kalnischkies <david@kalnischkies.de>
- Processed: Re: Bug#910941: apt-get changelog uses insecure HTTP for Debian
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Processed: Bug #910941 in apt marked as pending
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Bug#910893: apt: Add apt install option to revert conffiles
Next by Date: Bug#910941: apt-get changelog uses insecure HTTP for Debian
Previous by thread: Bug#910893: apt: Add apt install option to revert conffiles
Next by thread: Bug#910941: apt-get changelog uses insecure HTTP for Debian
Index(es):
- Date
- Thread