Bug 10366

Summary: dropbear download url has changed
Product: buildroot Reporter: adyke
Component: Outdated packageAssignee: unassigned
Status: RESOLVED INVALID    
Severity: normal CC: buildroot
Priority: P5    
Version: 2017.08   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Host: Target:
Build:

Description adyke 2017-10-05 16:30:12 UTC
The dropbear download URL has changed

it used to be http://matt.ucc.asn.au/dropbear/releases

it is now https://matt.ucc.asn.au/dropbear/
Comment 1 adyke 2017-10-05 16:34:17 UTC
Oops, typo'd the new URL:

https://matt.ucc.asn.au/dropbear/releases


the https is the important part
Comment 2 Peter Korsgaard 2017-10-05 20:31:31 UTC
In what way has it changed?

http still works here:

wget http://matt.ucc.asn.au/dropbear/releases/dropbear-2017.75.tar.bz2
--2017-10-05 22:26:51--  http://matt.ucc.asn.au/dropbear/releases/dropbear-2017.75.tar.bz2
Resolving matt.ucc.asn.au (matt.ucc.asn.au)... 130.95.13.18, 2405:3c00:5200:100::18
Connecting to matt.ucc.asn.au (matt.ucc.asn.au)|130.95.13.18|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1623392 (1.5M) [application/x-bzip2]
Saving to: ‘dropbear-2017.75.tar.bz2’

(and so does https):

wget https://matt.ucc.asn.au/dropbear/releases/dropbear-2017.75.tar.bz2
--2017-10-05 22:27:26--  https://matt.ucc.asn.au/dropbear/releases/dropbear-2017.75.tar.bz2
Resolving matt.ucc.asn.au (matt.ucc.asn.au)... 130.95.13.18, 2405:3c00:5200:100::18
Connecting to matt.ucc.asn.au (matt.ucc.asn.au)|130.95.13.18|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1623392 (1.5M) [application/x-bzip2]
Saving to: ‘dropbear-2017.75.tar.bz2.1’

The server does send a HSTS header to ask browsers to use https, but that isn't really a problem with wget.
Comment 3 adyke 2017-10-05 21:09:02 UTC
Hum. Maybe my corporate firewall is at fault here. I could not access dropbear's website via http, only https. I incorrectly assumed it was a change on to the website.
Comment 4 Peter Korsgaard 2017-10-05 21:20:28 UTC
With "access" do you mean visit the website with a web browser? The HSTS header should cause the browser to rewrite http to https, but it should still work.
Comment 5 adyke 2017-10-06 12:37:42 UTC
With both wget and a web browser I fail to get anything from the http address because the redirect fails. I tried it at home with no problems so it must be the corporate firewall; our company is known to do some funky stuff with https.
Comment 6 Peter Korsgaard 2017-10-06 12:45:38 UTC
(In reply to adyke from comment #5)

Ok. Can you post the exact error message you get from wget (and your wget version)?

For downloads done by Buildroot it should automatically fall back to sources.buildroot.org when upstream isn't accessible. Isn't that working for you?
Comment 7 adyke 2017-10-06 12:57:37 UTC
Sure:

>>> dropbear 2017.75 Downloading
--2017-10-06 08:53:56--  http://matt.ucc.asn.au/dropbear/releases/dropbear-2017.75.tar.bz2
Resolving matt.ucc.asn.au (matt.ucc.asn.au)... 130.95.13.18, 2405:3c00:5200:100::18
Connecting to matt.ucc.asn.au (matt.ucc.asn.au)|130.95.13.18|:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://192.168.244.187:15871/cgi-bin/blockpage.cgi?ws-session=18446744073228076661 [following]
--2017-10-06 08:53:56--  http://192.168.244.187:15871/cgi-bin/blockpage.cgi?ws-session=18446744073228076661
Connecting to 192.168.244.187:15871...

It hangs when trying to connect to the 192.168 address, which must be some trickery that IT has put in place. It would seem that our firewall is redirecting me to some sort of infinite loop
Comment 8 Peter Korsgaard 2017-10-06 13:57:51 UTC
(In reply to adyke from comment #7)

Ok, that very much sounds like an issue specific to your local IT setup. I would suggest you contact your IT staff to sort it out.