mirror August 2018

mirror@lists.centos.org

15 participants
28 discussions

Redirects to https considered harmful
by Anssi Johansson 06 Aug '18

06 Aug '18

So let's get this straight.. There are a few CentOS mirrors that redirect their http traffic to https. This is fairly easy nowadays with Let's Encrypt and their automatic cert installation scripts. While I believe that the intention is good, I'm afraid the forced redirects are not actually helping. I can't speak for other projects, but for CentOS mirrors, I believe that you should respond using the same protocol the request was sent. My concern is that there are organizations (hospitals, banks, research centers etc) that want to make sure no confidential information leaks out from their organization. Connections to random HTTPS sites may get blocked at their firewall because the firewall can't see what's inside the request. It should also be pointed out that the scripts behind http://mirror-status.centos.org/ will (currently) happily follow all kinds of redirects to retrieve the timestamp file. However, the scripts that create the actual data for mirrorlist.centos.org for each repository are unable to access https URLs. So the moment you set up that redirect to https, your mirror stopped being included in the output of mirrorlist.centos.org. I have already tried reaching out to a few mirrors doing such redirects, but I have not received a response yet. Those mirrors will eventually be disabled after a few more automatic nag emails, but I'm hoping that those mirror operators would exclude their CentOS mirror traffic from the redirects before that happens. To be clear, you are free to offer CentOS files over https, but the redirects should be disabled. I can see the CentOS mirror system supporting https and mirrorlist.c.o (optionally) handing out https URLs some day, but even then, I believe that http requests should be answered with http, and https requests should be answered with https. Thank you for your time!

2 1

New Mirror at Dakota State University
by Holm, Eric 05 Aug '18

05 Aug '18

HTTP: http://repo.ialab.dsu.edu/centos/ Sync schedule: Every 4 hrs Bandwidth: 2.5Gbps Internet 1/ 10Gbps Internet2 Location: Madison, SD, US Sponsor: Dakota State University Sponsor URL: https://dsu.edu IPv4 address to authorize: 138.247.115.248 IPv6 address to authorize: NA Email contact: dsu-repo.ialab(a)dsu.edu Mirroring AltArch : no

2 1

Mirror: centos.blazar.mx Update
by Roberto Valencia C. 04 Aug '18

04 Aug '18

HTTP: http://centos.blazar.mx Sync schedule: 0,6,12,18 Bandwidth: 100Mbps Location: Mexico Sponsor: Blazar Networks Sponsor URL: www.blazar.mx IPv4 address to authorize: 148.72.149.118 Email contact: contacto(a)blazar.mx Regards.

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

mirror August 2018