Opened 3 years ago
Closed 2 years ago
#683 closed enhancement (fixed)
Installer Support HTTPS
| Reported by: | trockefeller | Owned by: | |
|---|---|---|---|
| Priority: | major | Component: | Installer |
| Version: | Keywords: | https | |
| Cc: |
Description
If I go to https://download.osgeo.org/osgeo4w/ inside of chrome, it looks like the download mirror does support https with a certificate from Let's Encyrpt, and as far as I can tell, I can download any file that I need to using HTTPS in my browser.
If I don't explicitly go to the https site, it defaults to http instead of https, and there are certain files that I can't download from the http site like http://download.osgeo.org/osgeo4w/v2/x86_64/release/qgis/qgis/qgis-3.20.0-5.tar.bz2
It appears to be getting blocked by our business's firewall, and is somehow related to maybe file type and or size of the file because I can download most files using http, but the larger files are blocked
I see this when using the OSGeo4W installer as well, because the install will just halt at the download phase of these files that I can't download over http.
My workaround has been to download the files that fail over http over https in my browser, and then I copy that file into the temp directory where the downloads are cached for the OSGeo4W installer and then restart the installer.
I tried adding a "User URL" when choosing a download site, and tried putting in https://download.osgeo.org, but if I do that, it immediately fails saying "Can't open /x86_64/setup.ini.bz2" even though I can find and download that exact file at https://download.osgeo.org/osgeo4w/v2/x86_64/ inside of my browser.
I feel like HTTPS should be supported by the installer, and should really be the default for security reasons
Implemented in 1.1.1-1 (https://github.com/jef-n/OSGeo4W/commit/e838c91da23)