Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gluon-autoupdater: allow https mirror urls #3264

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

kevin-olbrich
Copy link
Contributor

No description provided.

@github-actions github-actions bot added the 3. topic: package Topic: Gluon Packages label May 15, 2024
@kevin-olbrich
Copy link
Contributor Author

Features
TLS support
Gluon now provides HTTPS client support when the tls feature is included in the site configuration, allowing nodes to establish encrypted connections to autoupdater mirrors, opkg repositories and other HTTPS servers.
Source: https://gluon.readthedocs.io/en/latest/releases/v2023.2.html

TLS support can be enabled but the site check prevents https mirror urls in site.conf.

@neocturne
Copy link
Member

Hmm, the change is working as intended, but optimally we'd only allow HTTPS if the gluon-tls package is installed, to prevent accidentally building non-updateable firmwares (which could happen by removing the tls feature to save space, without thinking about updating the URL).

This could be implemented by having gluon-tls create a marker file like gluon-wireless-encryption-wpa3 does, and check for the existence of the marker in the site check script (similar to the check for the contents of the default_branch file).

@neocturne
Copy link
Member

neocturne commented May 15, 2024

Hmm, or does libustream fall back to HTTP anyways when HTTPS is requested, but not available?

Edit: It does not fall back.

@T0biii
Copy link

T0biii commented Jun 3, 2024

maybe auto select the correct protocol if the tls feature is there or not.
if you want explicitly http:// set the URL to it. if you want http:// and/or https:// remove the prefix?
and if you have https:// set, try to fallback to http:// if all https:// mirrors are unreachable

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. topic: package Topic: Gluon Packages
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants