[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-07-24 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Matthew Flaschen mflasc...@wikimedia.org changed:

   What|Removed |Added

   See Also||https://bugzilla.wikimedia.
   ||org/show_bug.cgi?id=68553

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-07-24 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #79 from chmark...@hotmail.com ---
See Also: https://bugzilla.wikimedia.org/show_bug.cgi?id=68554

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-05-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Mark A. Hershberger m...@everybody.org changed:

   What|Removed |Added

 Status|RESOLVED|VERIFIED

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-05-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #78 from Sumana Harihareswara suma...@wikimedia.org ---
Thanks to everyone who raised or worked on this issue - you have helped keep
our users safer.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-05-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Matthew Flaschen mflasc...@wikimedia.org changed:

   What|Removed |Added

 Status|PATCH_TO_REVIEW |RESOLVED
 Resolution|--- |FIXED

--- Comment #76 from Matthew Flaschen mflasc...@wikimedia.org ---
Now fixed, based on testing the prior examples from this thread, plus a couple
extras.

aa.wikipedia.com still doesn't work, but that's really bug 40998.

Reopen if you find one that still has the issue.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-05-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #77 from Matthew Flaschen mflasc...@wikimedia.org ---
(In reply to Matthew Flaschen from comment #76)
 aa.wikipedia.com still doesn't work, but that's really bug 40998.

I meant to say aa.wikiversity.com (the one mentioned earlier), but actually
neither work.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-05-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #75 from Gerrit Notification Bot gerritad...@wikimedia.org ---
Change 106109 merged by Tim Starling:
final (I hope!) fix for protorel redirects

https://gerrit.wikimedia.org/r/106109

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-02-24 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #73 from Andre Klapper aklap...@wikimedia.org ---
(In reply to Gerrit Notification Bot from comment #64)
 https://gerrit.wikimedia.org/r/106109

jeremyb: Patch should be split into several patches - anybody willing to do
this?

Greg: You set this to highest priority half a year ago. Is the importance still
correct?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-02-24 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Greg Grossmeier g...@wikimedia.org changed:

   What|Removed |Added

   Priority|Highest |High

--- Comment #74 from Greg Grossmeier g...@wikimedia.org ---
Lowering prio (thanks for the ping, Andre). Letting Jeremy/Ops take it from
here. Chris Steipp can review if needed.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Tim Landscheidt t...@tim-landscheidt.de changed:

   What|Removed |Added

 CC||t...@tim-landscheidt.de

--- Comment #72 from Tim Landscheidt t...@tim-landscheidt.de ---
For the Toolserver redirects to come, I wrote Gerrit change #108467 if that's
useful for this bug.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-16 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #70 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #69)
 Shouldn't the response header for a HEAD request be identical to that for a
 GET
 request?

Probably the same most of the time. Not saying HEAD testing is worthless but
the first thing to test should be something that more closely approximates
actual usage in the wild.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-16 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #71 from MZMcBride b...@mzmcbride.com ---
As I suggested on IRC, I think this is an area where defined test cases would
be very helpful, arguably essential.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #64 from Gerrit Notification Bot gerritad...@wikimedia.org ---
Change 106109 had a related patch set uploaded by Jeremyb:
final (I hope!) fix for protorel redirects

https://gerrit.wikimedia.org/r/106109

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Gerrit Notification Bot gerritad...@wikimedia.org changed:

   What|Removed |Added

 Status|REOPENED|PATCH_TO_REVIEW

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

jeremyb bugzilla+org.wikime...@tuxmachine.com changed:

   What|Removed |Added

   Assignee|tstarl...@wikimedia.org |bugzilla+org.wikimedia@tuxm
   ||achine.com

--- Comment #65 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #63)
Please use curl -vs | grep rather than curl -Is

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #66 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #65)
 (In reply to comment #63)
 Please use curl -vs | grep rather than curl -Is

(make that curl -vs 21 /dev/null | grep)

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #67 from MZMcBride b...@mzmcbride.com ---
(In reply to comment #66)
 (In reply to comment #65)
 (In reply to comment #63)
 Please use curl -vs | grep rather than curl -Is
 
 (make that curl -vs 21 /dev/null | grep)

Why?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #68 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #67)
 Why?

Most UAs encountering these redirects will be sending GETs. Your tests used
HEAD. Why not use what most UAs will be using?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2014-01-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

chmark...@hotmail.com changed:

   What|Removed |Added

 CC||chmark...@hotmail.com

--- Comment #69 from chmark...@hotmail.com ---
(In reply to comment #68)
 
 Most UAs encountering these redirects will be sending GETs. Your tests used
 HEAD. Why not use what most UAs will be using?

Shouldn't the response header for a HEAD request be identical to that for a GET
request?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-12-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

MZMcBride b...@mzmcbride.com changed:

   What|Removed |Added

 Status|RESOLVED|REOPENED
 Resolution|FIXED   |---

--- Comment #63 from MZMcBride b...@mzmcbride.com ---
(In reply to comment #22, comment #23, and comment #51)
 Test cases
 
 * https://mediawiki.org
 * https://wikimedia.org
 * https://wikipedia.org
 * https://www.wikisource.org
 * https://www.wikimediafoundation.org
 * https://wiktionary.org
 * https://wikiquote.org
 * https://wikinews.org
 * https://wikivoyage.org
 * https://dk.wikipedia.org
 * https://wikibooks.org
 * https://textbook.wikipedia.org
 * https://aa.wikiversity.com
 * https://quote.wikipedia.org
 * https://wikimania.wikimedia.org

This issue isn't fully fixed.




CORRECT (HTTPS -- HTTPS):

$ curl -Is https://mediawiki.org; | grep Location
Location: https://www.mediawiki.org/

$ curl -Is https://www.wikimediafoundation.org; | grep Location
Location: https://wikimediafoundation.org/

$ curl -Is https://dk.wikipedia.org; | grep Location
Location: https://da.wikipedia.org/

(Though I'm not sure why dk redirects to da... assuming that's deliberate.)

$ curl -Is https://quote.wikipedia.org; | grep Location
Location: https://en.wikiquote.org/

$ curl -Is https://textbook.wikipedia.org; | grep Location
Location: https://www.wikibooks.org/

$ curl -Is https://wikimania.wikimedia.org; | grep Location
Location: https://wikimania2014.wikimedia.org/




INCORRECT (HTTPS -- HTTP):

$ curl -Is https://wikimedia.org; | grep Location
Location: http://www.wikimedia.org/

$ curl -Is https://wikipedia.org; | grep Location
Location: http://www.wikipedia.org/

$ curl -Is https://www.wikisource.org; | grep Location
Location: http://wikisource.org/

$ curl -Is https://wiktionary.org; | grep Location
Location: http://www.wiktionary.org/

$ curl -Is https://wikiquote.org; | grep Location
Location: http://www.wikiquote.org/

$ curl -Is https://wikinews.org; | grep Location
Location: http://www.wikinews.org/

$ curl -Is https://wikivoyage.org; | grep Location
Location: http://www.wikivoyage.org/

$ curl -Is https://wikibooks.org; | grep Location
Location: http://www.wikibooks.org/




PROBABLY IRRELEVANT:
$ curl -I https://aa.wikiversity.com;
curl: (51) SSL peer certificate or SSH remote key was not OK

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Tim Starling tstarl...@wikimedia.org changed:

   What|Removed |Added

 Status|PATCH_TO_REVIEW |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-25 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #62 from Gerrit Notification Bot gerritad...@wikimedia.org ---
Change 96438 merged by Tim Starling:
Generate redirects.conf

https://gerrit.wikimedia.org/r/96438

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-19 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #61 from Gerrit Notification Bot gerritad...@wikimedia.org ---
Change 96438 had a related patch set uploaded by Tim Starling:
Generate redirects.conf

https://gerrit.wikimedia.org/r/96438

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-19 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Gerrit Notification Bot gerritad...@wikimedia.org changed:

   What|Removed |Added

 Status|NEW |PATCH_TO_REVIEW

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Tim Starling tstarl...@wikimedia.org changed:

   What|Removed |Added

 CC||tstarl...@wikimedia.org
   Assignee|wikibugs-l@lists.wikimedia. |tstarl...@wikimedia.org
   |org |

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #60 from Antoine hashar Musso has...@free.fr ---
Bug 51700 was an issue we had with http or https redirect being cached, i.e.
not varying on X-Forward-Protocol.  Squid did not cache the redirect so that
wasn't an issue.

The related fix is  https://gerrit.wikimedia.org/r/#/c/75583/ Fix up Vary
headers on 30x redirects from Apache.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #58 from Andre Klapper aklap...@wikimedia.org ---
Greg set this ticket to highest priority three months ago, so I wonder if that
still reflects priorities.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-11-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #59 from Greg Grossmeier g...@wikimedia.org ---
(In reply to comment #58)
 Greg set this ticket to highest priority three months ago, so I wonder if
 that still reflects priorities.

It obviously hasn't been Platform's Highest priority for the past 3 months,
wrongly or rightly. :/

I'll reassess current situation and priorities amongst Platform soon. Sorry.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-10-12 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #57 from MZMcBride b...@mzmcbride.com ---
(In reply to comment #56)
 It looks like Rob is proposing to fix it on the Apache/ops side.  That Gerrit
 is in operations/apache-config.

In the short-term, yes. But Ryan L, Ken S., and Rob L. suggest on this bug that
the long-term solution is for MediaWiki to handle these types of redirects. I
think Andre may have been asking who might eventually handle that portion.

I'll repeat what I wrote earlier this year:

 Clarification about what you mean (or a rough sketch of how you think this
 should be implemented in Wikimedia's environment) would be wonderful. Firing
 up MediaWiki to do this type of high-level redirect seems kind of silly to me,
 but I don't really care about the implementation details.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-10-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #55 from Andre Klapper aklap...@wikimedia.org ---
(In reply to comment #54 by Rob Lanphier)
 We had a brief in-office discussion, and the workaround we would like to
 propose for this is to change the 301 redirect to a 302 redirect in Gerrit
 change #13293, and remove the 'Header set Vary X-Forwarded-Proto'.

Does any specific MW core developer plan to work on this?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-10-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #56 from Matthew Flaschen mflasc...@wikimedia.org ---
(In reply to comment #55)
 Does any specific MW core developer plan to work on this?

It looks like Rob is proposing to fix it on the Apache/ops side.  That Gerrit
is in operations/apache-config.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #53 from Ken Snider ksni...@wikimedia.org ---
I agree with Ryan here. Fixing this in Mediawiki should be the focus, otherwise
we have to mangle the redirect in apache/varnish. Better if the wiki could
return the HTTPS redirect directly instead. 

If for some reason this isn't feasible, then it'll be on us to find a
workaround. 

Thanks.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #54 from Rob Lanphier ro...@wikimedia.org ---
We had a brief in-office discussion, and the workaround we would like to
propose for this is to change the 301 redirect to a 302 redirect in Gerrit
change #13293, and remove the 'Header set Vary X-Forwarded-Proto'.  That
should disable caching for the redirect itself without generally disabling or
splitting the cache.  The downside is that the redirect won't be cached at all,
but we're hoping that we don't get too much traffic on this particular set of
redirects.

Longer term, we can potentially move this into MediaWiki (perhaps as part of
HipHop), but we'd like to avoid doing this too hastily.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Donald Lancon dc...@obkb.com changed:

   What|Removed |Added

 CC||dc...@obkb.com

--- Comment #51 from Donald Lancon dc...@obkb.com ---
In addition to those listed above (comment #22 and comment #23), please note
that as of today, almost 2 weeks after HTTPS has been forced for all
logged-in users:

* https://wiktionary.org/
* https://wikiquote.org/
* https://wikinews.org/
* https://wikivoyage.org/

also all get redirected to the non-secure www.* versions.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

MZMcBride b...@mzmcbride.com changed:

   What|Removed |Added

 CC||ksni...@wikimedia.org,
   ||ro...@wikimedia.org

--- Comment #52 from MZMcBride b...@mzmcbride.com ---
(In reply to comment #50)
 Apache doesn't handle this well, and we don't really want to do it in
 varnish. It's likely best for MediaWiki to handle this instead...

Are you saying this is a non-ops issue, then? In my view, either Rob L. or Ken
S. need to figure out who to assign this ticket to in order to get it resolved.
Or we need to adjust the stated priority, but I'd prefer not to do that. If
it's best for MediaWiki to handle this, it moves from ops to platform/core, I
think.

Clarification about what you mean (or a rough sketch of how you think this
should be implemented in Wikimedia's environment) would be wonderful. Firing up
MediaWiki to do this type of high-level redirect seems kind of silly to me, but
I don't really care about the implementation details. I'll trust your judgment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-03 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #47 from Andre Klapper aklap...@wikimedia.org ---
Quick info: Investigating this problem is on the to-do list for this week.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-03 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #49 from Greg Grossmeier g...@wikimedia.org ---
Oops, I forgot about/missed MZ's comment from way up there ^^

(In reply to comment #22)
 Test cases
 
 * https://mediawiki.org
 * https://wikimedia.org
 * https://wikipedia.org
 * https://www.wikisource.org
 * https://www.wikimediafoundation.org
 
 RT tickets (I believe):
 
 * RT #1668
 * RT #2847
 * RT #2783

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-03 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #50 from Ryan Lane rlan...@gmail.com ---
Apache doesn't handle this well, and we don't really want to do it in varnish.
It's likely best for MediaWiki to handle this instead...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-03 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #48 from Greg Grossmeier g...@wikimedia.org ---
Daniel/Asher/Ryan: Is there an RT ticket for this? *seems* mostly in Ops/apache
domain vs Platform, right?

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-09-01 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Maarten Dammers maar...@mdammers.nl changed:

   What|Removed |Added

 CC||maar...@mdammers.nl

--- Comment #46 from Maarten Dammers maar...@mdammers.nl ---
Bump. Any news? If we consider https important than bugs like this shouldn't be
left open for almost 2 years.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-25 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

jeremyb bugzilla+org.wikime...@tuxmachine.com changed:

   What|Removed |Added

 CC||umherirrender_de...@web.de

--- Comment #45 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
*** Bug 52698 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-20 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Matthew Flaschen mflasc...@wikimedia.org changed:

   What|Removed |Added

 Blocks||27946

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

Greg Grossmeier g...@wikimedia.org changed:

   What|Removed |Added

   Priority|High|Highest
 CC||g...@wikimedia.org

--- Comment #44 from Greg Grossmeier g...@wikimedia.org ---
As this is blocked by the varnish work, can the project page be updated,
specifically dates and RT tickets so those interested can follow along?
https://wikitech.wikimedia.org/wiki/Projects#Switch_.22text.22_to_Varnish

Also, upping importance given current WMF priorities and community desires.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-13 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

jeremyb bugzilla+org.wikime...@tuxmachine.com changed:

   What|Removed |Added

 Status|REOPENED|NEW

--- Comment #43 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #42)
 jeremyb, I think the idea was that we'd move this into VCL and do the
 redirects
 before even reaching Apache. I'm not sure if I like the idea. I'll leave it
 to
 whoever decides to implement that :) I agree that it's nasty, though.

I'm not completely sure which I prefer but I thought the general trend was to
move stuff out to apache/php where we could (e.g. zero/carriers).

We could always use a switch statement in asm in VCL to decide which redirect
code path to take for a given request.

Anyway, no matter which approach we end up going with having the domains listed
in redirects.conf move from squid to varnish is a blocker for fixing this bug.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-12 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

MZMcBride b...@mzmcbride.com changed:

   What|Removed |Added

Summary|redirects.conf should not   |Non-canonical HTTPS URLs
   |hardcode HTTP   |quietly redirect to HTTP

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-12 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #41 from jeremyb bugzilla+org.wikime...@tuxmachine.com ---
(In reply to comment #40)
 Gerrit change #13293 indicates that these redirects should be moved to
 Varnish. Is this possible now? If so, do you have any pointers about which
 file(s) should be changed in order to move forward toward resolving this bug?

I suppose it may be possible to move some domains to varnish sooner than others
but I'm not sure if it's worth it. (We are making recent progress)

redirects should be moved to varnish isn't quite right. Redirects will still
be served from the same apaches they are now. Just they'll need to go through
varnish instead of squid in order to fix this bug. More status below.

We recently got an OTRS ticket about this:
On 2013-08-09 someone wrote:
 Subject: FYI: https://wikipedia.org redirects to http://www.wikipedia.org
 would make life a lot easier if i could just type https://wikipedia.org to
 get started.

Our reply:
 Thanks for pointing this out! I'm also looking forward to that being fixed.

 That's bug 31369https://bugzilla.wikimedia.org/31369 which is blocked on
 https://wikitech.wikimedia.org/wiki/Projects#Switch_.22text.22_to_Varnish
 (see also
 http://lists.wikimedia.org/pipermail/wikitech-l/2013-August/071086.html )

 Also, https://blog.wikimedia.org/2013/08/01/future-https-wikimedia-projects/
 (which mentions https://www.eff.org/https-everywhere which is probably the
 best short-term solution for you)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 31369] Non-canonical HTTPS URLs quietly redirect to HTTP

2013-08-12 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=31369

--- Comment #42 from Faidon Liambotis fai...@wikimedia.org ---
MZMcBride, no, text hasn't moved to Varnish yet. It's being worked on but we're
not there yet. When that happens, operations/puppet, templates/varnish/text*
would be the place to look for.

jeremyb, I think the idea was that we'd move this into VCL and do the redirects
before even reaching Apache. I'm not sure if I like the idea. I'll leave it to
whoever decides to implement that :) I agree that it's nasty, though.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l