Hello,

Am Wed, 4 Sep 2024 19:48:27 -0300
schrieb Antonio Terceiro <terce...@debian.org>:

> Can you please clarify how exactly are you hitting this issue? Can you
> provide an example of how I can reproduce this?

yes, sorry for omitting these details in my initial bug report.

I just created a fresh image for testing and ran the following procedure:

1. `apt install auto-apt-proxy ca-certificates`
   (certificates are necessary for https connections)
1. change the URL in `/etc/apt/sources.list` to
    http://deb.debian.org/debian
1. run `apt update` -> success
1. change the URL in `/etc/apt/sources.list` to
    https://deb.debian.org/debian
1. run `apt update` -> failure (see below)
1. `apt purge auto-apt-proxy`
1. run `apt update` -> success


Here `auto-apt-proxy` detected the presence of approx via the DNS SRV entry
(_apt_proxy._tcp).

The above example illustrates, that auto-apt-proxy will send the request for
an https ressource to approx, even though approx cannot handle such requests.

Of course, the use case behind the above switch to "https" can be questioned,
since the default settings for apt servers usually use http URLs.

In my use case we stumbled upon the problem, since our internal apt repository
server is usually accessed via https (for no specific reasons).
This turned out to be problematic as soon as approx was indirectly used via
auto-apt-proxy.

I hope, this clarifies my use case.

Cheers,
Lars


Error message during "apt update" for HTTPS URL via approx:

Err:2 https://deb.debian.org/debian bookworm InRelease
  Invalid response from proxy: HTTP/1.1 403 Forbidden  Content-type: text/html  
Content-Length: 76  Date: Fri, 06 Sep 2024 02:12:16 GMT  Server: approx/5.12 
Ocamlnet/     [IP: fdb5:576b:c643:100:216:3eff:fe27:86ee 9999]
Err:3 https://deb.debian.org/debian bookworm-updates InRelease
  Invalid response from proxy: HTTP/1.1 403 Forbidden  Content-type: text/html  
Content-Length: 76  Date: Fri, 06 Sep 2024 02:12:17 GMT  Server: approx/5.12 
Ocamlnet/     [IP: fdb5:576b:c643:100:216:3eff:fe27:86ee 9999]
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: Failed to fetch https://deb.debian.org/debian/dists/bookworm/InRelease  
Invalid response from proxy: HTTP/1.1 403 Forbidden  Content-type: text/html  
Content-Length: 76  Date: Fri, 06 Sep 2024 02:12:16 GMT  Server: approx/5.12 
Ocamlnet/     [IP: fdb5:576b:c643:100:216:3eff:fe27:86ee 9999]
W: Failed to fetch 
https://deb.debian.org/debian/dists/bookworm-updates/InRelease  Invalid 
response from proxy: HTTP/1.1 403 Forbidden  Content-type: text/html  
Content-Length: 76  Date: Fri, 06 Sep 2024 02:12:17 GMT  Server: approx/5.12 
Ocamlnet/     [IP: fdb5:576b:c643:100:216:3eff:fe27:86ee 9999]

Reply via email to