<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>59526</bug_id>
          
          <creation_ts>2026-06-13 17:14:45 +0300</creation_ts>
          <short_desc>Doesn&apos;t follow https redirects</short_desc>
          <delta_ts>2026-06-13 17:14:45 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>apt-https</component>
          <version>unstable</version>
          <rep_platform>x86_64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Konstantin A Lepikhov (L.A. Kostis)">lakostis</reporter>
          <assigned_to name="placeholder@altlinux.org">placeholder</assigned_to>
          <cc>boyarsh</cc>
    
    <cc>glebfm</cc>
    
    <cc>imz</cc>
    
    <cc>ldv</cc>
    
    <cc>placeholder</cc>
    
    <cc>vt</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>289433</commentid>
    <comment_count>0</comment_count>
    <who name="Konstantin A Lepikhov (L.A. Kostis)">lakostis</who>
    <bug_when>2026-06-13 17:14:45 +0300</bug_when>
    <thetext>Привет!

Бага очень похожа на https://github.com/syncthing/syncthing/issues/10156 (apt upgrade gives 401 Unauthorized)

❯ rpm -q apt-https
apt-https-0.5.15lorg2-alt101.x86_64

❯ sudo apt-get install https://alt-lakostis.gitlab.io/kernel-image-lks-wks/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm
[sudo] password for lakostis:
Please login to eu2.contabostorage.com (secure)
Username: ^C

При этом пакет скачивается браузером и curl:

❯ curl -vLO https://alt-lakostis.gitlab.io/kernel-image-lks-wks/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm
*   Trying [2600:1901:0:7b8a::]:443...       
* Immediate connect fail for 2600:1901:0:7b8a::: Network is unreachable
* connect to 2600:1901:0:7b8a:: port 443 from :: port 0 failed: Success
* Host alt-lakostis.gitlab.io:443 was resolved.
* IPv6: 2600:1901:0:7b8a::                   
* IPv4: 35.185.44.232                         
*   Trying 35.185.44.232:443...                           
* GnuTLS priority: NORMAL:%PROFILE_MEDIUM:-ARCFOUR-128:-CTYPE-ALL:+CTYPE-X509:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.3:+VERS-TLS1.2
* ALPN: curl offers h2,http/1.1                                                                                                              
* SSL Trust Anchors:                                                                                                                         
*   CAfile: 121 certificates in /usr/share/ca-certificates/ca-bundle.crt                                                                                                                                                                                                                  
* SSL connection using TLS1.3 / ECDHE_RSA_AES_128_GCM_SHA256
*   SSL certificate verified by GnuTLS
*   SSL certificate expiration date OK
*   SSL certificate activation date OK
*   SSL certificate status verification SKIPPED
*   common name: *.gitlab.io (matched)
*   certificate public key: RSA  
*   certificate version: #3
*   subject: CN=*.gitlab.io    
*   start date: Fri, 16 Jan 2026 19:03:23 GMT
*   expire date: Mon, 15 Feb 2027 07:59:59 GMT
*   issuer: C=BE,O=GlobalSign nv-sa,CN=GlobalSign GCC R6 AlphaSSL CA 2025
* ALPN: server accepted h2         
* Established connection to alt-lakostis.gitlab.io (35.185.44.232 port 443) from 192.168.1.100 port 59828 
  % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                 Dload  Upload  Total   Spent   Left   Speed
  0      0   0      0   0      0      0      0                              0* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://alt-lakostis.gitlab.io/kernel-image-lks-wks/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm
* [HTTP/2] [1] [:method: GET]                                                                                                                                                                                                                                                             
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: alt-lakostis.gitlab.io]                 
* [HTTP/2] [1] [:path: /kernel-image-lks-wks/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm]
* [HTTP/2] [1] [user-agent: curl/8.20.0]
* [HTTP/2] [1] [accept: */*]    
&gt; GET /kernel-image-lks-wks/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm HTTP/2
&gt; Host: alt-lakostis.gitlab.io
&gt; User-Agent: curl/8.20.0
&gt; Accept: */*                                                          
&gt;                                                             
* Request completely sent off
&lt; HTTP/2 302 
&lt; content-type: text/html; charset=utf-8
&lt; location: https://eu2.contabostorage.com/4c93d1f0504049878145e8b977876da9%3Akernel-image/public/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm
&lt; permissions-policy: interest-cohort=()
&lt; vary: Origin
&lt; x-request-id: 01KV0N3EN2B8WA1XQAYXGDK3KV
&lt; content-length: 212
&lt; date: Sat, 13 Jun 2026 14:10:19 GMT
* Ignoring the response-body
* setting size while ignoring
&lt; 
100    212 100    212   0      0    472      0                              0
* Connection #0 to host alt-lakostis.gitlab.io:443 left intact
* Issue another request to this URL: &apos;https://eu2.contabostorage.com/4c93d1f0504049878145e8b977876da9%3Akernel-image/public/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm&apos;
* Host eu2.contabostorage.com:443 was resolved.
* IPv6: (none)
* IPv4: 185.219.143.85, 185.219.143.84
*   Trying 185.219.143.85:443...
* GnuTLS priority: NORMAL:%PROFILE_MEDIUM:-ARCFOUR-128:-CTYPE-ALL:+CTYPE-X509:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.3:+VERS-TLS1.2
* ALPN: curl offers h2,http/1.1
* SSL connection using TLS1.3 / ECDHE_RSA_AES_128_GCM_SHA256
*   SSL certificate verified by GnuTLS
*   SSL certificate expiration date OK
*   SSL certificate activation date OK
*   SSL certificate status verification SKIPPED
*   common name: contabostorage.com (matched)
*   certificate public key: RSA
*   certificate version: #3
*   subject: CN=contabostorage.com
*   start date: Sun, 24 May 2026 00:00:00 GMT
*   expire date: Sat, 22 Aug 2026 23:59:59 GMT
*   issuer: C=AT,O=ZeroSSL GmbH,CN=ZeroSSL RSA DV SSL CA 2
* ALPN: server did not agree on a protocol. Uses default.
* Established connection to eu2.contabostorage.com (185.219.143.85 port 443) from xx.xx.xx.xx port 54558 
  0      0   0      0   0      0      0      0                              0* using HTTP/1.x
&gt; GET /4c93d1f0504049878145e8b977876da9%3Akernel-image/public/lks-wks/repo/x86_64/RPMS.hasher/kernel-modules-zenergy-lks-wks-1.0-alt1.gf77293f.397824.4.35.x86_64.rpm HTTP/1.1
&gt; Host: eu2.contabostorage.com
&gt; User-Agent: curl/8.20.0
&gt; Accept: */*
&gt; 
* Request completely sent off
&lt; HTTP/1.1 200 OK
&lt; content-type: application/x-rpm
&lt; content-length: 7612
&lt; x-ratelimit-limit-second: 250
&lt; ratelimit-limit: 250
&lt; ratelimit-remaining: 249
&lt; ratelimit-reset: 1
&lt; x-ratelimit-remaining-second: 249
&lt; server: nginx
&lt; date: Sat, 13 Jun 2026 14:10:19 GMT
&lt; last-modified: Fri, 12 Jun 2026 10:18:31 GMT
&lt; x-rgw-object-type: Normal
&lt; etag: &quot;050d7b90081c388cc1fa573c549c9cd0&quot;
&lt; x-amz-meta-s3cmd-attrs: atime:1781258024/ctime:1781258024/gid:500/gname:lakostis/md5:050d7b90081c388cc1fa573c549c9cd0/mode:33188/mtime:1781247958/uid:500/uname:lakostis
&lt; x-amz-storage-class: STANDARD
&lt; x-amz-request-id: tx00000046f096e19ec49fe-006a2d64cb-431696450-eu5
&lt; x-proxy-cache: MISS
&lt; accept-ranges: bytes
&lt; access-control-allow-origin: *
&lt; strict-transport-security: max-age=16000000; includeSubDomains; preload;
&lt; 
{ [7612 bytes data]
100   7612 100   7612   0      0  11243      0                              0
* Connection #1 to host eu2.contabostorage.com:443 left intact

пока в качестве обходного решения заменил ссылки на репозиторий на прямое указание url на eu2.contabostorage.com.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>