Page MenuHomePhabricator

Enable HTTPS for dumps.wikimedia.org, download.wikimedia.org and releases.wikimedia.org
Closed, DeclinedPublic

Description

I imagine it might be additionally useful for .sig files, but just in general "because we can", right?

http://download.wikimedia.org/mediawiki/1.22/mediawiki-1.22.0.tar.gz


Version: wmf-deployment
Severity: normal

Details

Reference
bz58292

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 2:40 AM
bzimport added projects: HTTPS, acl*sre-team.
bzimport set Reference to bz58292.
bzimport added a subscriber: Unknown Object (MLST).

There's probably a ticket in RT (https://rt.wikimedia.org) about this specific issue. Related:

  • bug 23004 comment 9
  • bug 32066

https://dumps.wikimedia.org/ homepage contains mixed content:

Please change it to protocol-relative URL or remove it entirely, since this image doesn't exist (404).

(In reply to chmarkine from comment #3)

https://dumps.wikimedia.org/ homepage contains mixed content:

Please change it to protocol-relative URL or remove it entirely, since this
image doesn't exist (404).

Has that link ever worked? The 'monobook' directory was renamed to 'MonoBook', but this version doesn't work either. This should probably refer to bits.wikimedia.org, or preferably the file should be copied to dumps.

(In reply to Bartosz Dziewoński from comment #4)

Has that link ever worked? The 'monobook' directory was renamed to
'MonoBook', but this version doesn't work either. This should probably refer
to bits.wikimedia.org, or preferably the file should be copied to dumps.

Is that file supposed to be https://upload.wikimedia.org/wikipedia/commons/a/a6/Headbg.jpg? Actually I guess we can just remove it, since I don't see why we need to include a background image on that page.

Change 145619 had a related patch set uploaded by JanZerebecki:
dumps: Remove css background image that is 404

https://gerrit.wikimedia.org/r/145619

Change 145619 merged by Dzahn:
dumps: Point CSS background image to correct location

https://gerrit.wikimedia.org/r/145619

even though that change has been merged you won't see a difference, the templates being touched are not actually applied, see my last comment on the gerrit change

HTTPS got enabled. though the URL changed:

https://releases.wikimedia.org/mediawiki/1.22/

The old urls are now redirects which still have an invalid certificate, but last I checked ops isn't interested in serving valid or wildcard certs from redirect domains.

E.g.

https://download.wikimedia.org/mediawiki/1.22/

Results in a certificate warning due to it serving a cert for dumps.wikimedia.org