[JBoss JIRA] (JBDS-3754) Installer: redirect links for Vagrant and VirtualBox should use https
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
[
https://issues.jboss.org/browse/JBDS-3754?page=com.atlassian.jira.plugin....
]
Denis Golovin commented on JBDS-3754:
-------------------------------------
Download over https is not available for virtualbox, that's why we use http redirect.
There is https link but with invalid site certificate. In case of using http link we have
sha256 to verify downloaded file to prevent 'man in the middle' attacks. I
confirmed with Product Security team if http + checksum verification is good enough for
public release. Not sure what else we can do here.
Installer: redirect links for Vagrant and VirtualBox should use
https
---------------------------------------------------------------------
Key: JBDS-3754
URL: https://issues.jboss.org/browse/JBDS-3754
Project: Red Hat JBoss Developer Studio (devstudio)
Issue Type: Enhancement
Components: platform-installer
Affects Versions: 9.1.0.CR1
Reporter: Pavol Pitonak
Assignee: Denis Golovin
Priority: Blocker
Labels: havoc
Fix For: 10.2.0.AM2
Installer's requirements.json file \[1] declares location of Vagrant and VirtualBox
installers like these:
{code}
http://developers.redhat.com/redirect/to/vagrant-1.7.4.download
http://developers.redhat.com/redirect/to/virtualbox-5.0.8.download
{code}
They should use *https* scheme.
\[1]
https://github.com/redhat-developer-tooling/developer-platform-install/bl...
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
3459
days inactive
3459
days old
jbosstools-issues@lists.jboss.org
0 comments
1 participants
tags (0)
participants (1)
-
Denis Golovin (JIRA)