Bug 1135777 - Use https for connectivity check
Summary: Use https for connectivity check
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: NetworkManager
Version: 22
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Dan Williams
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-08-31 13:02 UTC by Bastien Nocera
Modified: 2015-06-02 20:24 UTC (History)
7 users (show)

Fixed In Version: NetworkManager-0.9.10.0-6.git20140704.fc21
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-06-02 20:24:51 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Bastien Nocera 2014-08-31 13:02:33 UTC
NetworkManager-config-connectivity-fedora-0.9.10.0-4.git20140704.fc21.x86_64

$ cat /etc/NetworkManager/conf.d/20-connectivity-fedora.conf 
[connectivity]
uri=http://fedoraproject.org/static/hotspot.txt
response=OK
interval=300

HTTPS should be used instead, as even if the content of the file is uninteresting (ha!) there is metadata about the user's system in the request, such as the user-agent.

Comment 1 Jirka Klimes 2014-09-05 22:32:41 UTC
upstream:
aee8eb8 contrib/rpm: use HTTPS for connectivity check URL (rh #1135777)

NetworkManager-0.9.10.0-6.git20140704.fc21
NetworkManager-0.9.10.0-6.git20140704.fc22

Comment 2 Dan Winship 2014-09-08 13:54:15 UTC
The request NM sends does not have a User-Agent. It's just:

  GET /static/hotspot.txt
  Host: fedoraproject.org

Comment 3 Jaroslav Reznik 2015-03-03 17:15:26 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 22 development cycle.
Changing version to '22'.

More information and reason for this action is here:
https://fedoraproject.org/wiki/Fedora_Program_Management/HouseKeeping/Fedora22

Comment 4 Thomas Haller 2015-06-02 20:24:51 UTC
Closing this bug. The packages are long updated for f21 and f22.


Note You need to log in before you can comment on or make changes to this bug.