We have a feed server that is configured with http->https redirect. i.e., it supports HSTS and clients that don't support HSTS get a 308 redirect to https URL. opkg is not able to use feeds from this server and outputs following # opkg update Downloading http://.../Packages.gz. Downloading http://.../Packages.asc. * opkg_verify_gpg_signature: Unable to verify signature: No data * pkg_src_verify: Signature verification failed for uri-all-0.