Bug 14913

Summary: opkg doesn't work with feed server configured with http->https redirect
Product: [Yocto Project Subprojects] opkg Reporter: Chaitanya Vadrevu <chaitanya.vadrevu>
Component: opkgAssignee: Alex Stewart <alex.stewart>
Status: ACCEPTED --- QA Contact:
Severity: enhancement    
Priority: Undecided    
Version: 0.6.0   
Target Milestone: next-minor   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: Don't know

Description Chaitanya Vadrevu 2022-09-08 21:07:27 UTC
We have a feed server that is configured with http->https redirect.
i.e., it supports HSTS and clients that don't support HSTS get a 308 redirect to https URL.

opkg is not able to use feeds from this server and outputs following

# opkg update
Downloading http://.../Packages.gz.
Downloading http://.../Packages.asc.
 * opkg_verify_gpg_signature: Unable to verify signature: No data
 * pkg_src_verify: Signature verification failed for uri-all-0.