Re: people.debian.org will move from ravel to paradis and become HTTPS only
On Tue, Jul 15, 2014 at 02:00:12PM +0000, Thorsten Glaser wrote:
> Dixi quod…
>
> >Martin Zobel-Helas dixit:
> >
> >>Furthermore, we will change the people.debian.org web-service such that
> >>only HTTPS connections will be supported (unencrypted requests will be
> >>redirected).
> […]
> >Take it as a heads-up to maybe move stuff elsewhere, if it needs http
> >(e.g. APT repos work well via http since they use PGP for signatures).
>
> Actually, this will break most DDs’ APT repositories because
> apt-transport-https is usually not installed.
This can actually lead to a weird behavior for users. In a system having
something under people.debian.org in apt sources.list and
apt-transport-https not installed, in today's testing upgrade,
$ sudo apt-get update
[...]
E: The method driver /usr/lib/apt/methods/https could not be found.
N: Is the package apt-transport-https installed?
$ sudo apt-get install apt-transport-https
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
apt-transport-https
0 upgraded, 1 newly installed, 0 to remove and 275 not upgraded.
Need to get 132 kB of archives.
After this operation, 221 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
apt-transport-https
Install these packages without verification? [y/N]
E: Some packages could not be authenticated
Commenting out the people.debian.org entry leads to successful
$ sudo apt-get update
$ sudo apt-get install apt-transport-https
and people.debian.org entry can then be re-enabled. But normal users having
such entries (fortunately not many) will be puzzled by the problem.
Regards,
--
Agustin
Reply to: