Bug 1135777

Summary: Use https for connectivity check
Product: [Fedora] Fedora Reporter: Bastien Nocera <bnocera>
Component: NetworkManagerAssignee: Dan Williams <dcbw>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: bitlord0xff, danw, dcbw, jklimes, psimerda, satellitgo, thaller
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: NetworkManager-0.9.10.0-6.git20140704.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-06-02 20:24:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Bastien Nocera 2014-08-31 13:02:33 UTC
NetworkManager-config-connectivity-fedora-0.9.10.0-4.git20140704.fc21.x86_64

$ cat /etc/NetworkManager/conf.d/20-connectivity-fedora.conf 
[connectivity]
uri=http://fedoraproject.org/static/hotspot.txt
response=OK
interval=300

HTTPS should be used instead, as even if the content of the file is uninteresting (ha!) there is metadata about the user's system in the request, such as the user-agent.

Comment 1 Jirka Klimes 2014-09-05 22:32:41 UTC
upstream:
aee8eb8 contrib/rpm: use HTTPS for connectivity check URL (rh #1135777)

NetworkManager-0.9.10.0-6.git20140704.fc21
NetworkManager-0.9.10.0-6.git20140704.fc22

Comment 2 Dan Winship 2014-09-08 13:54:15 UTC
The request NM sends does not have a User-Agent. It's just:

  GET /static/hotspot.txt
  Host: fedoraproject.org

Comment 3 Jaroslav Reznik 2015-03-03 17:15:26 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 22 development cycle.
Changing version to '22'.

More information and reason for this action is here:
https://fedoraproject.org/wiki/Fedora_Program_Management/HouseKeeping/Fedora22

Comment 4 Thomas Haller 2015-06-02 20:24:51 UTC
Closing this bug. The packages are long updated for f21 and f22.