Details
-
Bug
-
Resolution: Fixed
-
Medium
Description
I'm trying to access a page and get redirected to a https website with an invalid certificate
- the redirection
> curl -I http://tortoisehg.bitbucket.org/latest.dat HTTP/1.1 301 Moved Permanently Content-Type: text/html Date: Fri, 23 Dec 2016 08:21:31 GMT Location: https://tortoisehg.bitbucket.org/latest.dat Connection: Keep-Alive Content-Length: 0
- the invalid certicate issue
> curl https://tortoisehg.bitbucket.org/latest.dat curl: (51) SSL: certificate subject name (bitbucket.org) does not match target host name 'tortoisehg.bitbucket.org' zsh: exit 51 curl https://tortoisehg.bitbucket.org/latest.dat
- file content is actually there
> curl --insecure https://tortoisehg.bitbucket.org/latest.dat 10 4.0.1 .*Windows.*(WOW|x)64.* http://bitbucket.org/tortoisehg/files/downloads/tortoisehg-4.0.1-x86.msi TortoiseHg (including Mercurial) 4.0.1 - x86 Windows 10 4.0.1 .*Windows.*(WOW|x)64.* http://bitbucket.org/tortoisehg/files/downloads/tortoisehg-4.0.1-x64.msi TortoiseHg (including Mercurial) 4.0.1 - x64 Windows 20 4.0.1 .*Windows.*(WOW|x)64.* http://mercurial.selenic.com/release/windows/mercurial-4.0.1-x86.msi Mercurial 4.0.1 MSI installer - x86 Windows - requires admin rights 20 4.0.1 .*Windows.*(WOW|x)64.* http://mercurial.selenic.com/release/windows/mercurial-4.0.1-x64.msi Mercurial 4.0.1 MSI installer - x64 Windows - requires admin rights 40 4.0.1 .*Windows.*(WOW|x)64.* http://mercurial.selenic.com/release/windows/mercurial-4.0.1.win32-py2.7.msi Mercurial 4.0.1 for Python 2.7 on Windows x86 (source install) 40 4.0.1 .*Windows.*(WOW|x)64.* http://mercurial.selenic.com/release/windows/mercurial-4.0.1.win-amd64-py2.7.msi Mercurial 4.0.1 for Python 2.7 on Windows x64 (source install)
Note that the root of the repository redirect using the same scheme
> curl -I http://tortoisehg.bitbucket.org/ HTTP/1.1 301 Moved Permanently Content-Type: text/html Date: Fri, 23 Dec 2016 08:23:44 GMT Location: https://tortoisehg.bitbucket.org/ Connection: Keep-Alive
But does not seems to be the right location for the website anymore (invalid certificate + 404)
> curl -I https://tortoisehg.bitbucket.org/ curl: (51) SSL: certificate subject name (bitbucket.org) does not match target host name 'tortoisehg.bitbucket.org' zsh: exit 51 curl -I https://tortoisehg.bitbucket.org/ > curl -I --insecure https://tortoisehg.bitbucket.org/ HTTP/1.1 404 Not Found Server: nginx/1.1.19 Vary: Accept-Encoding Cache-Control: max-age=900 Content-Type: text/html;charset=UTF-8 Strict-Transport-Security: max-age=31536000 Date: Fri, 23 Dec 2016 08:25:20 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache X-Magnolia-Registration: Registered Accept-Ranges: bytes Connection: keep-alive X-Cache-Info: caching Content-Length: 15014