Bug#842040: Please add https support
On 12/07/2016 10:18 PM, Philipp Kern wrote:
> choose-mirror does not ask for the protocol by default, as the question
> is priority medium. I did my installation by passing priority=medium on
> the command-line, but you could as well preseed the protocol to https I
> think. In that case it does not show a list of mirrors (because
> Mirrorlist does not list https capabilities), but works just fine with
> deb.debian.org, which points to Cloudfront for HTTPS support. d-i
> component load worked, debootstrap worked and the resulting chroot had
> apt-transport-https and a sources.list pointing to
> https://deb.debian.org. The security archive was added without https,
> but that's unavoidable at this point given that it does not actually
> support it.
We could use deb.debian.org as default security mirror, I guess. Or add
a https vhost on our security mirrors. Definitely not a blocker for
landing this though.
> So I suppose this should be ok to commit and push?
No objection from me, at least. Thanks for doing this work.