[FS#325] download statistics page is 404

LEDE Bugs lede-bugs at lists.infradead.org
Mon Dec 5 14:09:58 PST 2016


The following task has a new comment added:

FS#325 - download statistics page is 404
User who did this - Hannu Nyman (hnyman)

----------
Jow mentioned to me in email conversation that it happens also with Chrome.

I complained about the same issue (with buildbot and Firefox) in https://forum.lede-project.org/t/s-wiki-site-in-lede-wiki/392/17?u=hnyman

The "use only https for all lede-project.org services" started to happen since the www and wiki were combined. I guess that in that move also the HSTS setting enforcing https got somehow assigned to the whole domain :-( 

 > Strict-Transport-Securitymax-age=31536000; includeSubDomains

one reason may be that the www server also answers for domain-style https://lede-project.org address in addition of https://www.lede-project.org

The "only https" gets enforced once you visit https://lede-project.org 

The only cures I have found are in that stackoverflow discussion.

I hope that devs either 
* disable the enforcement of https via HSTS, 
* mitigate the problem by e.g. shortening the HSTS timeout significantly (from he current 31536000 seconds to a few minutes), or 
* install https for the web stats and buildbot web interfaces.

----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=325#comment1010



More information about the lede-bugs mailing list