Univention Bugzilla – Bug 45227
Zsync file is downloaded via HTTP instead of HTTPS
Last modified: 2017-09-06 17:10:12 CEST
The App Center downloads the zsync file via HTTP instead of HTTPS: # univention-app update Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz"... Downloading "https://appcenter.software-univention.de/meta-inf/4.1/index.json.gz.gpg"... Downloading "https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg"... Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"... Downloading "https://appcenter.software-univention.de/meta-inf/rating.ini"... Downloading "https://appcenter.software-univention.de/meta-inf/license_types.ini"... Downloading "http://appcenter.software-univention.de/meta-inf/4.1/all.tar.zsync"...
Fixed in univention-appcenter 6.0.9-3A~4.2.0.201708291136
Falling back to download https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gz if zsync fails whysoever. Then extract it to ${CACHE_DIR}/.all.tar and check it wrt https://appcenter.software-univention.de/meta-inf/4.1/all.tar.gpg
OK - looks good, if zsync fails, the appcenter tries the normal download procedure OK - YAM
<http://errata.software-univention.de/ucs/4.2/158.html>