Package: apt-listbugs
Version: 0.1.23
Severity: normal

Dear Maintainer,

As the manpage indicates, apt-listbugs connects to bugs.debian.org:80 by
default:

    ~$ apt-listbugs -d list . 2>/dev/null | grep -A4 '= Request'
    = Request

    ! CONNECT TO bugs.debian.org:80
    ! CONNECTION ESTABLISHED
    POST /cgi-bin/soap.cgi HTTP/1.1

IMHO the default should be instead to connect to bugs.debian.org:443
over SSL.  But apt-listbugs doesn't seem to support https://; passing
-p443 fails as the client tries to speak https:// over an SSL socket.

Thanks for maintaining apt-listbugs!
-- 
Guilhem.

-- System Information:
Debian Release: 9.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apt-listbugs depends on:
ii  apt             1.4~rc2
ii  ruby            1:2.3.3
ii  ruby-debian     0.3.9+b6
ii  ruby-gettext    3.2.2-2
ii  ruby-soap4r     2.0.5-3
ii  ruby-unicode    0.4.4-2+b7
ii  ruby-xmlparser  0.7.3-3

Versions of packages apt-listbugs recommends:
ii  ruby-httpclient  2.7.1-1

Versions of packages apt-listbugs suggests:
ii  debianutils                4.8.1
ii  elinks [www-browser]       0.12~pre6-12
ii  firefox-esr [www-browser]  45.7.0esr-4
ii  reportbug                  7.1.5

-- no debconf information

Attachment: signature.asc
Description: PGP signature

Reply via email to