From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: Force https redirect missing from ci, workflow and workflows guix.info sub-domains Resent-From: "Collin J. Doering" Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 09 Sep 2019 02:50:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 37348@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15679973686972 (code B ref -1); Mon, 09 Sep 2019 02:50:02 +0000 Received: (at submit) by debbugs.gnu.org; 9 Sep 2019 02:49:28 +0000 Received: from localhost ([127.0.0.1]:39401 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i79k7-0001oN-Jd for submit@debbugs.gnu.org; Sun, 08 Sep 2019 22:49:28 -0400 Received: from lists.gnu.org ([209.51.188.17]:50189) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i79EC-0007I5-R3 for submit@debbugs.gnu.org; Sun, 08 Sep 2019 22:16:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:38039) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i79EB-0005dJ-Pk for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:28 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1i79EA-0000rT-DQ for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:27 -0400 Received: from mail-io1-xd34.google.com ([2607:f8b0:4864:20::d34]:35425) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1i79EA-0000ov-7q for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:26 -0400 Received: by mail-io1-xd34.google.com with SMTP id f4so24480829ion.2 for ; Sun, 08 Sep 2019 19:16:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rekahsoft.ca; s=google; h=user-agent:from:to:subject:date:message-id:mime-version; bh=GAT8pcBchWo3eJ+cjtLHr4C+1ginO3vieMzUW6n4/N8=; b=aNKI+A+S63GgnsDDfyvPz0y1cIxL8NM4+kbqJN8xfXsHo36nNcTpekemHqqFmxqFC/ Rx4kaeyOg3y20qtr2VpR59LfA30kBBJmqfeIr4IVTzyHsVnQtWFdevlKrmuTQJEv/2Fc hn3TQ5qnCYsWZQ66ZsFNeEn/D3/304k9qBnlqPmUhUrx6ueLSc/+rHwaU7/DvpMtBdve w+MxNt3frCB+NwRMElScObojixXRp4jgx8623MPMFB7g6dynqlgWyV7VUETnx0p9vgi3 Ju+nuXhXbyKrqhGbuoYQFEd2VVPL/1BrZ4h5r4elEKJE5oZXCmIeMJHLKsuO9AitYn+0 wJLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:from:to:subject:date:message-id :mime-version; bh=GAT8pcBchWo3eJ+cjtLHr4C+1ginO3vieMzUW6n4/N8=; b=FpTkU3Q+TYDXFZEIsP0/BlzfS2OuMigWpoLCHRuyhtFmoC+lo9aEpsJ7Ls7CwkDs6z u+MIMtN8D+ciTOOGOJYC5GFc4En1/SHaXMhphzCwXt227U8TUcNGBMSBgMPHIAKFoEho j6E45rejNH1P0u7BQSVbcmn6Wduecg7roAqpHsVUzM+vhMSFKsgRHsNnoCFybMlUzlmv b4MFwuMHFV2Diq2Qkfp8gYK7IZ4f8xBBW5xfoFZpLdZgZg/UKqj+1ctg/CTNbSnQK2Vo J97hCN3+6T1m3mFkXupas/IMLUBtP516A/Iv1rFHlWx73Tj3+4c2irYboa693jvlLclv RAsA== X-Gm-Message-State: APjAAAXKflalEL2bNkk8qxL50GvL2G8eup6t+kQD6Kmhbm3esOuFhbY7 9KXb4cWJci+o41J2EmrDBRCRdKGEvNWEWw== X-Google-Smtp-Source: APXvYqwZm4WFSkK0HZ/TGvJfHdrdArz03xOUG8IdNWqWy64TAGPxEZ3Ngw/TBSYvFfj3hiqtZ3LJgg== X-Received: by 2002:a05:6638:6b2:: with SMTP id d18mr23275973jad.61.1567995383769; Sun, 08 Sep 2019 19:16:23 -0700 (PDT) Received: from rekahsoft-mini ([2607:fea8:1c60:690::5]) by smtp.gmail.com with ESMTPSA id l8sm8729882ioh.85.2019.09.08.19.16.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 08 Sep 2019 19:16:22 -0700 (PDT) User-agent: mu4e 1.0; emacs 26.3 From: "Collin J. Doering" Date: Sun, 08 Sep 2019 22:16:17 -0400 Message-ID: <8736h643ke.fsf@rekahsoft.ca> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:4864:20::d34 X-Spam-Score: -1.3 (-) X-Mailman-Approved-At: Sun, 08 Sep 2019 22:49:26 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi all, Not sure where the best place to report this, however today I noticed that ci.guix.info, workflow.guix.info and workflows.guix.info do not redirect http to https, though its also served over https. Kind regards, =2D-=20 Collin J. Doering http://rekahsoft.ca http://blog.rekahsoft.ca http://git.rekahsoft.ca --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+NVG868371PRtki+e03rkyErMCIFAl11tfEACgkQe03rkyEr MCLttgf/bDwfsDvI+SFJWZ8Qm0wU+diCPtuRPrPCLZPY8ovK1IBsG+U/2RZcAs+w 1VG3YHsQ5fFxp+6wo2nSs3WJCwIdWkl0i6rqcrvUwczLue4qskhh4Ey2r392PcqV Qng1wS1kfoRtMDuabxKmJRZb5IV6uR8YII0XHKppOzIheIXcugUnkDmqoZH8m+IE HDSPgRLBMumU2zXC2mGd/3MJcS/2oSQ7XcpL5TYfAQ0dyjbw6/hRak+VxU+g3Qw9 kz1QXJ5NjHtLF6+7Za2d3Y9sC0b7up84MFKhqTKOwmNWS+qWmcce9fTS1bb0/axs iZMCbEqGFGyQbLcP7ZL1qnuLkABuKg== =YdOw -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: Force https redirect missing from ci, workflow and workflows guix.info sub-domains Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 09 Sep 2019 06:48:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 37348@debbugs.gnu.org Received: via spool by 37348-submit@debbugs.gnu.org id=B37348.15680116716149 (code B ref 37348); Mon, 09 Sep 2019 06:48:02 +0000 Received: (at 37348) by debbugs.gnu.org; 9 Sep 2019 06:47:51 +0000 Received: from localhost ([127.0.0.1]:39480 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i7DSp-0001b7-54 for submit@debbugs.gnu.org; Mon, 09 Sep 2019 02:47:51 -0400 Received: from mira.cbaines.net ([212.71.252.8]:55432) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i7DSn-0001aw-IB for 37348@debbugs.gnu.org; Mon, 09 Sep 2019 02:47:50 -0400 Received: from localhost (cpc102582-walt20-2-0-cust14.13-2.cable.virginm.net [86.27.34.15]) by mira.cbaines.net (Postfix) with ESMTPSA id 26C101734B for <37348@debbugs.gnu.org>; Mon, 9 Sep 2019 07:47:48 +0100 (BST) Received: from capella (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id a5c9821a for <37348@debbugs.gnu.org>; Mon, 9 Sep 2019 06:47:46 +0000 (UTC) References: <8736h643ke.fsf@rekahsoft.ca> User-agent: mu4e 1.2.0; emacs 26.3 From: Christopher Baines In-reply-to: <8736h643ke.fsf@rekahsoft.ca> Date: Mon, 09 Sep 2019 07:47:44 +0100 Message-ID: <87h85mney7.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain Collin J. Doering writes: > Not sure where the best place to report this, however today I noticed > that ci.guix.info, workflow.guix.info and workflows.guix.info do not > redirect http to https, though its also served over https. I'm unsure if this is intentional, or something to change. There are security advantages to forcing all users to use HTTPS, with the disadvantage that some of those users might not want to use HTTPS. I'm not sure whether the need for security on those domains is high enough to justify not supporting plain HTTP... --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl119ZBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XeZnA//ectCSQ1pUy55pWjXxYfvfhNXYqvz79Vh0si0LJCpF3UhuVZZjq8j3D67 VSSMsT+9iqThmhrWu4Vl5dzJ9//jYZiGivgl4+ZF2b95BjT8FCT7+zA3xvwlNZ/A /UPkxMLlO/3DTW3sB3Fx6wwr9zDOCBojAK5jxPa/hcuVbhGrzTK0m/tfLWJqjiaI MjbxGqvroPTrKSZ8AekkeqYxsgvO9LsTqaSK1iGgaq42tf7+E67UHEvSLUE8gkn7 IpSK5hpQpdOqrYLCRpWqwW2bPqwro6Qbxrlp3nSlDjQtyAPH9oylk7AbnVEvEaiu W9FimoCdsSLi8jChdY+xrIfN2GBlLJkFR6J90k2MiI5R/ojBq5DUzxQxQdd4JZ+B ausRpy2o07hCWdVMQiRl1/B70ZxhCld9NC+tbebC9hcbKncscRopQSWzCPW6MnP7 Cg1j9GWSQQB2QTkp7Red7C8N1wE9TFpAkDWQEjJSHBv31/D0aXvqksu2Uf3RPFRQ ua7CyqxdrNPec8U9jhSc/Kl/RF2WJAh0lDb67/5TWtBlLhPP49ZCOQDrwAL9c+QH CYTyG++kOxbHmsZNRcUjXxM8LQXewqeLBrMaLe8U2gHwlyylhvC1hJ9B4+rz9pmh dpCf9iiS8GawrpVnKTJTa46Omv9/V8ZdHXBFtYWb+Ac6VVSkpBs= =OBPk -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default. References: <8736h643ke.fsf@rekahsoft.ca> In-Reply-To: <8736h643ke.fsf@rekahsoft.ca> Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 02 Nov 2021 16:10:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 37348@debbugs.gnu.org Received: via spool by 37348-submit@debbugs.gnu.org id=B37348.163586937313197 (code B ref 37348); Tue, 02 Nov 2021 16:10:02 +0000 Received: (at 37348) by debbugs.gnu.org; 2 Nov 2021 16:09:33 +0000 Received: from localhost ([127.0.0.1]:37874 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhwLs-0003Qn-H5 for submit@debbugs.gnu.org; Tue, 02 Nov 2021 12:09:32 -0400 Received: from tobias.gr ([80.241.217.52]:55320) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mhwLn-0003QZ-HN for 37348@debbugs.gnu.org; Tue, 02 Nov 2021 12:09:31 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=KIv53D+NWLVlI ApTMryx3dbI+Adi23ntbjxkeFhnEmc=; h=date:subject:to:from; d=tobias.gr; b=Xji601vQspBMcEGqi5ccGA0WpHQigkJXLKETKn/oaxdseVq2lbFDoKmPABYKD1wi8s7n VpE5apcvMjpObXSKqexqzkzKGVJbWqLNYOaxsIwCODPSbvBdwKd6y1BBzX/2H3Kmccdqrs h8GQ+Af8rc/V1z9YmUpIGENOZB/u1Du94TpSG6Urlv1PTNp/pC8lrNvSZJedpEI5Dc80HG T8iFRwgj5L+/eECB9UGLqFgvaK2PcacMMKB1oFaQzDbYwbwEJcXlb2mppeYALh0RaT4OwW zztqx1txycPy4qjcux0Gy/oStKjwoWzv/UCpKTOmTpJOUEWNuWc5Cv8q5gLfJfJw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 86798975 (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO) for <37348@debbugs.gnu.org>; Tue, 2 Nov 2021 16:09:21 +0000 (UTC) From: Tobias Geerinckx-Rice Date: Tue, 2 Nov 2021 17:09:50 +0100 Message-Id: <20211102160950.20467-1-me@tobias.gr> X-Mailer: git-send-email 2.33.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * hydra/nginx/berlin.scm (%berlin-servers): Add a default port-80 server to redirect all requests to their HTTPS counterparts. Remove explicit HTTP support for guix.gnu.org and issues.guix.gnu.org. --- All, Like Chris I'm not convinced there was anything ‘missing’, but this is a practice whose time has come and come again and left several voice mails at this point. People are going to keep asking for it. The old ‘user choice’ argument always rung hollow to me. Shall we just do this? This is a conservative patch: it only redirects guix.gnu.org and issues.guix.gnu.org, the most (potential-)user-facing sites, to HTTPS. CI should probably remain reachable over HTTP indefinitely. Subprojects like GWL, friends like Bootstrappable, and anything else retain ‘user choice’, until they opt in. Kind regards, T G-R hydra/nginx/berlin.scm | 42 +++++++----------------------------------- 1 file changed, 7 insertions(+), 35 deletions(-) diff --git a/hydra/nginx/berlin.scm b/hydra/nginx/berlin.scm index 4713d7b..38854e3 100644 --- a/hydra/nginx/berlin.scm +++ b/hydra/nginx/berlin.scm @@ -797,31 +797,37 @@ PUBLISH-URL." (body (list "try_files $uri /$lang/$uri /$lang/$uri/index.html =404;"))) (nginx-location-configuration ;certbot (uri "/.well-known") (body (list "root /var/www;"))))) (define guix.gnu.org-locations (append guix.gnu.org-redirect-locations (guix.gnu.org-redirects-for-each-language) guix.gnu.org-other-locations)) (define %publish-url "http://localhost:3000") (define %berlin-servers (list - ;; Plain HTTP + ;; Redirect domains that don't explicitly support HTTP (below) to HTTPS. + (nginx-server-configuration + (listen '("80")) + (raw-content + (list "return 308 https://$host$request_uri;"))) + + ;; Domains that still explicitly support plain HTTP. (nginx-server-configuration (listen '("80")) (server-name '("ci.guix.gnu.org")) (locations (berlin-locations %publish-url)) (raw-content (list "access_log /var/log/nginx/http.access.log;" "proxy_set_header X-Forwarded-Host $host;" "proxy_set_header X-Forwarded-Port $server_port;" "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;"))) (nginx-server-configuration (listen '("80")) (server-name '("bootstrappable.org" "www.bootstrappable.org")) @@ -829,64 +835,30 @@ PUBLISH-URL." (raw-content (list "access_log /var/log/nginx/bootstrappable.access.log;"))) (nginx-server-configuration (listen '("80")) (server-name '("disarchive.guix.gnu.org")) (root "/gnu/disarchive") (raw-content ;; Tell nginx to always read 'FILE.gz' when asked for 'FILE', and to ;; gunzip it on the fly (because the client for this typically doesn't ;; properly support gzip encoding). (list "gzip_static always; gunzip on;\n" "access_log /var/log/nginx/disarchive.access.log;"))) - (nginx-server-configuration - (listen '("80")) - (server-name '("guix.gnu.org")) - (root "/srv/guix.gnu.org") - (locations guix.gnu.org-locations) - (raw-content - (list - "add_header Content-Security-Policy \"frame-ancestors 'none'\";" - - ;; TODO This works around NGinx using the epoch for the - ;; Last-Modified date, as well as the etag. - ;; See http://issues.guix.gnu.org/37207 - "add_header Last-Modified \"\";" - "if_modified_since off;" - "etag off;" - - "rewrite (.*)/$ $1/index.html;" - "access_log /var/log/nginx/guix-info.access.log;"))) - - (nginx-server-configuration - (listen '("80")) - (server-name '("issues.guix.gnu.org")) - (root "/home/rekado/mumi/") - (locations - (list (nginx-location-configuration ;certbot - (uri "/.well-known") - (body (list "root /var/www;"))) - (nginx-location-configuration - (uri "/") - (body '("proxy_pass http://localhost:1234;"))))) - (raw-content - (list - "access_log /var/log/nginx/issues-guix-info.access.log;"))) - (nginx-server-configuration (listen '("80")) (server-name '("guixwl.org" "www.guixwl.org")) (root "/home/rekado/gwl/") (locations (list (nginx-location-configuration ;certbot (uri "/.well-known") (body (list "root /var/www;"))) (nginx-location-configuration (uri "/manual") (body (list "alias /srv/gwl-manual;"))) ;; Pass requests to 'guix workflow --web-interface'. base-commit: 9782bc16ef4384171c7b7381ad27a4b9ba60ca61 -- 2.33.0 From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 03 Nov 2021 01:14:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: Cc: 37348@debbugs.gnu.org X-Debbugs-Original-Cc: 37348@debbugs.gnu.org, bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16359020174613 (code B ref -1); Wed, 03 Nov 2021 01:14:02 +0000 Received: (at submit) by debbugs.gnu.org; 3 Nov 2021 01:13:37 +0000 Received: from localhost ([127.0.0.1]:38413 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mi4qP-0001CL-KK for submit@debbugs.gnu.org; Tue, 02 Nov 2021 21:13:37 -0400 Received: from lists.gnu.org ([209.51.188.17]:49646) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mi4qO-0001CD-72 for submit@debbugs.gnu.org; Tue, 02 Nov 2021 21:13:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45032) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mi4qO-0003Bd-2y for bug-guix@gnu.org; Tue, 02 Nov 2021 21:13:36 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:41946) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mi4qL-00047F-S3 for bug-guix@gnu.org; Tue, 02 Nov 2021 21:13:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=1VPYgUt5l891o LuDVYnRMMa4X8/kIDFeftW4ZM7BJR0=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=birwZpwrgXirxm9BQSxZ9l1LgbcALcDq+wd+7sAG1db APJ1rnd+QXZP26aVNv+v1agMt6zF2CZrxt0ZkzmAQ2gdNYnW2npePJ5vXcU+yIzGKAtB/Q dpWDBCq1trS/L1Vc+M1s5M9y5oWY623UBfoH69CKFKEXyLFg6uh3/4KWfP7y7oQXh+b6Nn nipdgZaqSVhKZ0MXhUbiG3D7dsX3xbI4OzOslqi/vGjqgziQvt0cLWcSWvs0W4KiXMg7wM 5Gbru7I9pQH7Ju7u7ZEZeCUdoJqm2JFN/uw6tsZBTtf3Dcd5VmY/XthXMyKFAh41mDXAh1 ovbRKd7kvfNmvrf0qrw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 185b14e4 (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Wed, 3 Nov 2021 01:13:28 +0000 (UTC) References: <8736h643ke.fsf@rekahsoft.ca> <20211102160950.20467-1-me@tobias.gr> From: Tobias Geerinckx-Rice Date: Wed, 03 Nov 2021 02:06:31 +0100 In-reply-to: <20211102160950.20467-1-me@tobias.gr> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87ilxam46w.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.4 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Damn, Tobias Geerinckx-Rice via Bug reports for GNU Guix =E5=86=99=E9=81=93=EF=BC= =9A > This is a conservative patch: it only redirects guix.gnu.org and > issues.guix.gnu.org, the most (potential-)user-facing sites, to=20 > HTTPS. > > CI should probably remain reachable over HTTP indefinitely. > > Subprojects like GWL, friends like Bootstrappable, and anything=20 > else > retain =E2=80=98user choice=E2=80=99, until they opt in. The current situation is actually more horked than that: ~ =CE=BB curl -LI https://gnu.org HTTP/1.1 301 Moved Permanently [=E2=80=A6] Strict-Transport-Security: max-age=3D63072000; includeSubDomains;=20 preload This is a great security policy! It also announces to the modern=20 world that *all* HTTP connections to *any* subdomain of gnu.org=20 should be silently upgraded to HTTPS. If your UA honours this header and has ever visited gnu.org,=20 visiting http://ci.guix.gnu.org should not be possible. It will=20 immediately upgrade to HTTPS. Certificate errors can no longer be=20 bypassed. guix.gnu.org cannot relax this policy. Now, for some reason, current Firefox doesn't seem to do any of=20 this (compatibility?) but it may only be a matter of time. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYYHiRw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW156/MA/jGe0pPAhCnUM7ru93JFTLnId7eqRuibxLP38gho gSizAP9vcvv3TM2FgzT+a7ja326Kec1dR6PxfKVE+7A0RlD0Bw== =0ZQL -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 03 Nov 2021 01:21:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: Cc: 37348@debbugs.gnu.org X-Debbugs-Original-Cc: 37348@debbugs.gnu.org, bug-guix@gnu.org Received: via spool by 37348-submit@debbugs.gnu.org id=B37348.16359024595363 (code B ref 37348); Wed, 03 Nov 2021 01:21:01 +0000 Received: (at 37348) by debbugs.gnu.org; 3 Nov 2021 01:20:59 +0000 Received: from localhost ([127.0.0.1]:38436 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mi4xX-0001OR-FK for submit@debbugs.gnu.org; Tue, 02 Nov 2021 21:20:59 -0400 Received: from tobias.gr ([80.241.217.52]:41208) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mi4xW-0001OJ-A2 for 37348@debbugs.gnu.org; Tue, 02 Nov 2021 21:20:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=AEtxT1T/zBRPe +P7DX1S3vq5bFlDdlT1DBcLLURoagE=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=QCOu68C1gpbu8K+8uTgkBAfpXRQo5hcsTtraRruwU/R Htidbzx7WhC3yq2QUm8SVHRqRt5g8vkKTPCAsrabsfmgASLuUNEmIcy+RVo5ynqSgl+F3h 5ueZd4eB81KxV9PuoqQmOXByEkVMRpN57fNm/jgeGE2UwsTTyohEY0QWy9sonH0OGAh4fy TqD8aAF/i0SbgE0yqMI23ip9pbC9QmEemeWHdZ0LnQp0eQTNrqyTFkpynmFDo+rdgfSr5v tElikq6t0OAnrvOdqKyXEnO39rlWjtxOu0RJ+3rq3lIjoNOd7XI1e4i8e/IcXO8I8xg+ZQ 3ooekX35JleY+fzO22A== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id a56913ab (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Wed, 3 Nov 2021 01:20:56 +0000 (UTC) References: <8736h643ke.fsf@rekahsoft.ca> <20211102160950.20467-1-me@tobias.gr> <87ilxam46w.fsf@nckx> From: Tobias Geerinckx-Rice Date: Wed, 03 Nov 2021 02:18:11 +0100 In-reply-to: <87ilxam46w.fsf@nckx> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87ee7ym3ug.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 1.2 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: > Now, for some reason, current Firefox doesn't seem to do any of > this > (compatibility?) but it may only be a matter of time. Probably due to gnu.org wonkiness: ~ =?UTF-8?Q?=CE=BB?= curl -LI https://www.gnu.org =?UTF-8?Q?[=E2=80=A6]?= Strict-Transport-Security: max-age=63072000 Content analysis details: (1.2 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [80.241.217.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header -0.0 SPF_HELO_PASS SPF: HELO matches SPF record X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable > Now, for some reason, current Firefox doesn't seem to do any of=20 > this > (compatibility?) but it may only be a matter of time. Probably due to gnu.org wonkiness: ~ =CE=BB curl -LI https://www.gnu.org [=E2=80=A6] Strict-Transport-Security: max-age=3D63072000 I.e., missing includeSubDomains, and (at least my) browser's=20 apparent urge to connect to www.gnu.org even when I type=20 https://gnu.org. We can't keep relying on this, though. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYYHkBw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15W5MA/RB9ivagrCRr0JeMfQpxpOxbx6jQlVkrY1MTnTRY hsG8AQCBUPIn2L8rC/7myDTPIFj6vgTIhjGIcMZRymkFb4AUCg== =QO9B -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 05:14:28 2025 X-Loop: help-debbugs@gnu.org Subject: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 19 Nov 2021 16:04:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 37348 X-GNU-PR-Package: guix X-GNU-PR-Keywords: Cc: 37348-done@debbugs.gnu.org, 37348@debbugs.gnu.org X-Debbugs-Original-Cc: 37348-done@debbugs.gnu.org, bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.163733782426801 (code B ref -1); Fri, 19 Nov 2021 16:04:01 +0000 Received: (at submit) by debbugs.gnu.org; 19 Nov 2021 16:03:44 +0000 Received: from localhost ([127.0.0.1]:40407 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mo6MZ-0006yD-Qz for submit@debbugs.gnu.org; Fri, 19 Nov 2021 11:03:43 -0500 Received: from lists.gnu.org ([209.51.188.17]:51628) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mo6MX-0006y5-Cl for submit@debbugs.gnu.org; Fri, 19 Nov 2021 11:03:41 -0500 Received: from eggs.gnu.org ([209.51.188.92]:42164) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mo6MX-0003wP-8A for bug-guix@gnu.org; Fri, 19 Nov 2021 11:03:41 -0500 Received: from [2a02:c205:2020:6054::1] (port=54212 helo=tobias.gr) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mo6MR-0003q0-H0 for bug-guix@gnu.org; Fri, 19 Nov 2021 11:03:41 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=n8WhWJGrRHe1K 4kXnKGSIyY3svrJx1iDx3Xwz6/SPH8=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=fQTokLXc6ETzK3Ef+iew9oaP0jJpRLZYpLi6Oy/DOe9 kfycrJhf7OJkTOrDZzvb7Amxu9//zPi0jO+dKZGSS1fnx1mzjVgza4ARtkR6T3gZbRqLwD NVmcNmXdSzZD2Z+a2Hj9BrcX2QIMkxVlRC/4DT1iY38ECjh6uE/gtpcTnoG4vj26eUTUKA NkIjd5a5A8+OJY1RzHiXEiNjL1EcOys6d+CPzsU+OHxyPqtDwr/e+XzaNBCPklKZDP9hN3 Emarxk78KqXSNBKpZs6I4X916x83/ClSkqb+PtWvNsDkYXY4CklBfD777JOv54AdCdX6Ka AQ0Df0nAQUTHNNspHtQ== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 7fa317be (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Fri, 19 Nov 2021 16:03:29 +0000 (UTC) References: <8736h643ke.fsf@rekahsoft.ca> <20211102160950.20467-1-me@tobias.gr> From: Tobias Geerinckx-Rice Date: Fri, 19 Nov 2021 17:03:24 +0100 In-reply-to: <20211102160950.20467-1-me@tobias.gr> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87bl2gf7yi.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a02:c205:2020:6054::1 (failed) Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -2 X-Spam_score: -0.3 X-Spam_bar: / X-Spam_report: (-0.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.4 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Bug reports for GNU Guix =E5=86=99=E9=81=93=EF=BC= =9A > * hydra/nginx/berlin.scm (%berlin-servers): Add a default=20 > port-80 server > to redirect all requests to their HTTPS counterparts. Remove=20 > explicit > HTTP support for guix.gnu.org and issues.guix.gnu.org. Pushed as 4015696e45c2242a2e7221c4f43231db5581bda4. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYZfK9Q0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15Y60BALTOium2cR3gUbDnQ5RdpcBWqI9+p+q5TIQeFx48 9BXvAQCgjPnoBjMMelhZNFdCKp89mdaL0kNQJoyJelc9fVxOBw== =6f6q -----END PGP SIGNATURE----- --=-=-=-- From unknown Sat Jun 21 05:14:28 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: "Collin J. Doering" Subject: bug#37348: closed (Re: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default.) Message-ID: References: <87bl2gf7yi.fsf@nckx> <8736h643ke.fsf@rekahsoft.ca> X-Gnu-PR-Message: they-closed 37348 X-Gnu-PR-Package: guix Reply-To: 37348@debbugs.gnu.org Date: Fri, 19 Nov 2021 16:04:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1637337842-26844-1" This is a multi-part message in MIME format... ------------=_1637337842-26844-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #37348: Force https redirect missing from ci, workflow and workflows guix.i= nfo sub-domains which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 37348@debbugs.gnu.org. --=20 37348: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D37348 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1637337842-26844-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 37348-done) by debbugs.gnu.org; 19 Nov 2021 16:03:34 +0000 Received: from localhost ([127.0.0.1]:40404 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mo6MQ-0006xm-JK for submit@debbugs.gnu.org; Fri, 19 Nov 2021 11:03:34 -0500 Received: from tobias.gr ([80.241.217.52]:44456) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mo6MP-0006xX-6c for 37348-done@debbugs.gnu.org; Fri, 19 Nov 2021 11:03:33 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=n8WhWJGrRHe1K 4kXnKGSIyY3svrJx1iDx3Xwz6/SPH8=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=fQTokLXc6ETzK3Ef+iew9oaP0jJpRLZYpLi6Oy/DOe9 kfycrJhf7OJkTOrDZzvb7Amxu9//zPi0jO+dKZGSS1fnx1mzjVgza4ARtkR6T3gZbRqLwD NVmcNmXdSzZD2Z+a2Hj9BrcX2QIMkxVlRC/4DT1iY38ECjh6uE/gtpcTnoG4vj26eUTUKA NkIjd5a5A8+OJY1RzHiXEiNjL1EcOys6d+CPzsU+OHxyPqtDwr/e+XzaNBCPklKZDP9hN3 Emarxk78KqXSNBKpZs6I4X916x83/ClSkqb+PtWvNsDkYXY4CklBfD777JOv54AdCdX6Ka AQ0Df0nAQUTHNNspHtQ== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 7fa317be (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Fri, 19 Nov 2021 16:03:29 +0000 (UTC) References: <8736h643ke.fsf@rekahsoft.ca> <20211102160950.20467-1-me@tobias.gr> From: Tobias Geerinckx-Rice Subject: Re: bug#37348: [PATCH] hydra: berlin: Redirect HTTP to HTTPS by default. Date: Fri, 19 Nov 2021 17:03:24 +0100 In-reply-to: <20211102160950.20467-1-me@tobias.gr> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87bl2gf7yi.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 1.2 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Tobias Geerinckx-Rice via Bug reports for GNU Guix 写道： > * hydra/nginx/berlin.scm (%berlin-servers): Add a default > port-80 server > to redirect all requests to their HTTPS counterparts. Remove [...] Content analysis details: (1.2 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [80.241.217.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header -0.0 SPF_HELO_PASS SPF: HELO matches SPF record X-Debbugs-Envelope-To: 37348-done Cc: 37348-done@debbugs.gnu.org, bug-guix@gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Bug reports for GNU Guix =E5=86=99=E9=81=93=EF=BC= =9A > * hydra/nginx/berlin.scm (%berlin-servers): Add a default=20 > port-80 server > to redirect all requests to their HTTPS counterparts. Remove=20 > explicit > HTTP support for guix.gnu.org and issues.guix.gnu.org. Pushed as 4015696e45c2242a2e7221c4f43231db5581bda4. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYZfK9Q0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15Y60BALTOium2cR3gUbDnQ5RdpcBWqI9+p+q5TIQeFx48 9BXvAQCgjPnoBjMMelhZNFdCKp89mdaL0kNQJoyJelc9fVxOBw== =6f6q -----END PGP SIGNATURE----- --=-=-=-- ------------=_1637337842-26844-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 9 Sep 2019 02:49:28 +0000 Received: from localhost ([127.0.0.1]:39401 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i79k7-0001oN-Jd for submit@debbugs.gnu.org; Sun, 08 Sep 2019 22:49:28 -0400 Received: from lists.gnu.org ([209.51.188.17]:50189) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1i79EC-0007I5-R3 for submit@debbugs.gnu.org; Sun, 08 Sep 2019 22:16:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:38039) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1i79EB-0005dJ-Pk for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:28 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,URIBL_BLOCKED autolearn=disabled version=3.3.2 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1i79EA-0000rT-DQ for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:27 -0400 Received: from mail-io1-xd34.google.com ([2607:f8b0:4864:20::d34]:35425) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1i79EA-0000ov-7q for bug-guix@gnu.org; Sun, 08 Sep 2019 22:16:26 -0400 Received: by mail-io1-xd34.google.com with SMTP id f4so24480829ion.2 for ; Sun, 08 Sep 2019 19:16:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rekahsoft.ca; s=google; h=user-agent:from:to:subject:date:message-id:mime-version; bh=GAT8pcBchWo3eJ+cjtLHr4C+1ginO3vieMzUW6n4/N8=; b=aNKI+A+S63GgnsDDfyvPz0y1cIxL8NM4+kbqJN8xfXsHo36nNcTpekemHqqFmxqFC/ Rx4kaeyOg3y20qtr2VpR59LfA30kBBJmqfeIr4IVTzyHsVnQtWFdevlKrmuTQJEv/2Fc hn3TQ5qnCYsWZQ66ZsFNeEn/D3/304k9qBnlqPmUhUrx6ueLSc/+rHwaU7/DvpMtBdve w+MxNt3frCB+NwRMElScObojixXRp4jgx8623MPMFB7g6dynqlgWyV7VUETnx0p9vgi3 Ju+nuXhXbyKrqhGbuoYQFEd2VVPL/1BrZ4h5r4elEKJE5oZXCmIeMJHLKsuO9AitYn+0 wJLw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:from:to:subject:date:message-id :mime-version; bh=GAT8pcBchWo3eJ+cjtLHr4C+1ginO3vieMzUW6n4/N8=; b=FpTkU3Q+TYDXFZEIsP0/BlzfS2OuMigWpoLCHRuyhtFmoC+lo9aEpsJ7Ls7CwkDs6z u+MIMtN8D+ciTOOGOJYC5GFc4En1/SHaXMhphzCwXt227U8TUcNGBMSBgMPHIAKFoEho j6E45rejNH1P0u7BQSVbcmn6Wduecg7roAqpHsVUzM+vhMSFKsgRHsNnoCFybMlUzlmv b4MFwuMHFV2Diq2Qkfp8gYK7IZ4f8xBBW5xfoFZpLdZgZg/UKqj+1ctg/CTNbSnQK2Vo J97hCN3+6T1m3mFkXupas/IMLUBtP516A/Iv1rFHlWx73Tj3+4c2irYboa693jvlLclv RAsA== X-Gm-Message-State: APjAAAXKflalEL2bNkk8qxL50GvL2G8eup6t+kQD6Kmhbm3esOuFhbY7 9KXb4cWJci+o41J2EmrDBRCRdKGEvNWEWw== X-Google-Smtp-Source: APXvYqwZm4WFSkK0HZ/TGvJfHdrdArz03xOUG8IdNWqWy64TAGPxEZ3Ngw/TBSYvFfj3hiqtZ3LJgg== X-Received: by 2002:a05:6638:6b2:: with SMTP id d18mr23275973jad.61.1567995383769; Sun, 08 Sep 2019 19:16:23 -0700 (PDT) Received: from rekahsoft-mini ([2607:fea8:1c60:690::5]) by smtp.gmail.com with ESMTPSA id l8sm8729882ioh.85.2019.09.08.19.16.22 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 08 Sep 2019 19:16:22 -0700 (PDT) User-agent: mu4e 1.0; emacs 26.3 From: "Collin J. Doering" To: bug-guix@gnu.org Subject: Force https redirect missing from ci, workflow and workflows guix.info sub-domains Date: Sun, 08 Sep 2019 22:16:17 -0400 Message-ID: <8736h643ke.fsf@rekahsoft.ca> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:4864:20::d34 X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 08 Sep 2019 22:49:26 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi all, Not sure where the best place to report this, however today I noticed that ci.guix.info, workflow.guix.info and workflows.guix.info do not redirect http to https, though its also served over https. Kind regards, =2D-=20 Collin J. Doering http://rekahsoft.ca http://blog.rekahsoft.ca http://git.rekahsoft.ca --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEE+NVG868371PRtki+e03rkyErMCIFAl11tfEACgkQe03rkyEr MCLttgf/bDwfsDvI+SFJWZ8Qm0wU+diCPtuRPrPCLZPY8ovK1IBsG+U/2RZcAs+w 1VG3YHsQ5fFxp+6wo2nSs3WJCwIdWkl0i6rqcrvUwczLue4qskhh4Ey2r392PcqV Qng1wS1kfoRtMDuabxKmJRZb5IV6uR8YII0XHKppOzIheIXcugUnkDmqoZH8m+IE HDSPgRLBMumU2zXC2mGd/3MJcS/2oSQ7XcpL5TYfAQ0dyjbw6/hRak+VxU+g3Qw9 kz1QXJ5NjHtLF6+7Za2d3Y9sC0b7up84MFKhqTKOwmNWS+qWmcce9fTS1bb0/axs iZMCbEqGFGyQbLcP7ZL1qnuLkABuKg== =YdOw -----END PGP SIGNATURE----- --=-=-=-- ------------=_1637337842-26844-1--