Failed to download patches with HTTP

ZPM fails to download some patches. I found that all those patches have URLs with HTTP instead of HTTPS. Manually downloading these patches with wget fails with HTTP and succeeds with HTTPS.

Why are those URLs with HTTP? I think this should be considered a bug - who is responsible for this? opentext/Micro Focus or the original manufacturer?

Thanks,

Mirko

  • Can you give a specific example?  

    Is that same patch downloadable via HTTPS?  

    In general, patches are downloaded from the Vendors own site, so much depends on the patch vendor.

    But if a vendor's patch URL supports both HTTP and HTTPs, I would agree that most likely ZPM should be using HTTPS, but I would need specifics to know why.  It's possible a vendor only recently supported HTTPS for example, and the links were not updated.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • Yes, the same patch is downloadable via HTTPS. Here is an example:

    zc:~ # wget http://download.windowsupdate.com/d/msdownload/update/software/secu/2021/08/ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu
    --2023-09-07 14:16:25--  http://download.windowsupdate.com/d/msdownload/update/software/secu/2021/08/ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu
    Resolving download.windowsupdate.com (download.windowsupdate.com)... 93.184.221.240, 2606:2800:133:672:1e5f:2264:1854:1189
    Connecting to download.windowsupdate.com (download.windowsupdate.com)|93.184.221.240|:80... failed: Connection refused.
    Connecting to download.windowsupdate.com (download.windowsupdate.com)|2606:2800:133:672:1e5f:2264:1854:1189|:80... ^C
    
    
    zc:~ # wget --no-check-certificate  https://download.windowsupdate.com/d/msdownload/update/software/secu/2021/08/ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu
    --2023-09-07 14:16:45--  https://download.windowsupdate.com/d/msdownload/update/software/secu/2021/08/ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu
    Resolving download.windowsupdate.com (download.windowsupdate.com)... 93.184.221.240, 2606:2800:133:672:1e5f:2264:1854:1189
    Connecting to download.windowsupdate.com (download.windowsupdate.com)|93.184.221.240|:443... connected.
    WARNING: no certificate subject alternative name matches
            requested host name ‘download.windowsupdate.com’.
    HTTP request sent, awaiting response... 200 OK
    Length: 15505341 (15M) [application/octet-stream]
    Saving to: ‘ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu’
    
    100%[====================================================================================================================================================================================================================================>] 15,505,341  17.7MB/s   in 0.8s   
    
    2023-09-07 14:16:46 (17.7 MB/s) - ‘ssu-19041.1161-x64_e7e052f5cbe97d708ee5f56a8b575262d02cfaa4.msu’ saved [15505341/15505341]
    

  • Is that one of the specific Patches ZPM is trying to hit over HTTP but never tries over HTTPS?

    Which version of ZCM?  Are you using the new or old Feed?  The "Feed" is what controls the download links.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • ZCM 2020.3, new feed, we only introduced ZPM recently after upgrading to 2020.3.

    Yes, according to patch-management.log ZCM never tries HTTPS for this file.