Issue #4362: pkgdb2 uses http when trying to orphan a package - fedora-infrastructure

= bug description =

When I try to orphan fuse-encfs, pkgdb2 tries to send an unencrypted HTTP request to

http://admin.fedoraproject.org/pkgdb/package/fuse-encfs/orphan/0

and firefox warns about sending data unencrypted.

= bug analysis =

pkgdb uses http links internally.

= fix recommendation =

Should never use http links.

Fixed in git https://github.com/fedora-infra/pkgdb2/commit/d67b53290e62b9ebad7f4d6030c39ecc864480e4

1.4 is now in prod and fixes this

Assignee

None

Tags

None

Blocking

None

Depending on

None

Priority

None

Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.