HTTP 403 forbidden on gerrit when using plain HTTP
Closed, DeclinedPublicBUG REPORT
Actions

Assigned To

Authored By

	XtexChooser
	May 17 2024, 2:31 PM

Description

When requesting gerrit.wikimedia.org without HTTPS, HTTP 403 Forbidden is responded with.

xtex@xtex ~ (main)> curl -i gerrit.wikimedia.org
HTTP/1.1 403 Forbidden
Date: Fri, 17 May 2024 14:28:04 GMT
Server: Apache
Content-Length: 199
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access this resource.</p>
</body></html>

There should be a redirect to https (maybe?).

Related Objects

Mentioned Here: T238720: Deprecate and disable port 80 for one-off sites under canonical domains

Event Timeline

XtexChooser created this task.May 17 2024, 2:31 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 17 2024, 2:31 PM

Pppery added a project: Gerrit.May 17 2024, 2:36 PM

We no more support the http protocol. We have removed the redirect to https in November 2022 (config change) as part of T238720: Deprecate and disable port 80 for one-off sites under canonical domains :-]

I guess curl should eventually change to default to https as well, then from the manual page of curl v7.88.1:

If you specify URL without protocol:// prefix, curl will attempt to guess what protocol you might want. It will then default to HTTP but try other protocols based on often-used host name prefixes.

Pppery changed the task status from Resolved to Declined.May 17 2024, 3:28 PM

HTTP 403 forbidden on gerrit when using plain HTTPClosed, DeclinedPublicBUG REPORTActions

Description

Related Objects

Event Timeline

HTTP 403 forbidden on gerrit when using plain HTTP
Closed, DeclinedPublicBUG REPORT
Actions