Network guru help sought please

Tim ignored_mailbox at yahoo.com.au
Tue Jul 7 04:29:11 UTC 2009


On Mon, 2009-07-06 at 09:16 -0700, Rick Stevens wrote:
> Try removing the 's' from "https://".  The mirror list isn't on a
> secure server, just a regular old connection.

Wrong, it's served out on both.  I tried it both ways, and got the
following results (see below).  So the fault is something else.  

It makes sense to serve the mirror list securely, providing that the
client actually checks the certificate properly.  It makes it harder for
a man-in-the-middle attack to send you to a rogue mirror with sabotaged
files.

http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-11&arch=i386

# repo = fedora-11 arch = i386 country = AU 
http://mirror.aarnet.edu.au/pub/fedora/linux/releases/11/Everything/i386/os/
http://mirror.pacific.net.au/linux/fedora/linux/releases/11/Everything/i386/os/
http://ga14.files.bigpond.com:4040/fedora/linux/releases/11/Everything/i386/os/
http://ga13.files.bigpond.com:4040/fedora/linux/releases/11/Everything/i386/os/
http://mirror.internode.on.net/pub/fedora/linux/releases/11/Everything/i386/os/
http://ftp.iinet.net.au/pub/fedora/linux/releases/11/Everything/i386/os/
http://mirror.optus.net/fedora/linux/releases/11/Everything/i386/os/
http://ringtail.its.monash.edu.au/pub/fedora/linux/releases/11/Everything/i386/os/

   ---------------------------------------------------------------------

https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-11&arch=i386

# repo = fedora-11 arch = i386 country = AU 
http://ga14.files.bigpond.com:4040/fedora/linux/releases/11/Everything/i386/os/
http://mirror.internode.on.net/pub/fedora/linux/releases/11/Everything/i386/os/
http://ga13.files.bigpond.com:4040/fedora/linux/releases/11/Everything/i386/os/
http://mirror.aarnet.edu.au/pub/fedora/linux/releases/11/Everything/i386/os/
http://ftp.iinet.net.au/pub/fedora/linux/releases/11/Everything/i386/os/
http://mirror.pacific.net.au/linux/fedora/linux/releases/11/Everything/i386/os/
http://mirror.optus.net/fedora/linux/releases/11/Everything/i386/os/
http://ringtail.its.monash.edu.au/pub/fedora/linux/releases/11/Everything/i386/os/

-- 
[tim at localhost ~]$ uname -r
2.6.27.25-78.2.56.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.






More information about the fedora-list mailing list