= bug description = http://koji.fedoraproject.org/packages/ goes to builds of all packages. https://koji.fedoraproject.org/ is listening but does not go to the same packages directory.
Since we developers download builds for testing from here, it would be safer if it were available via SSL.
The same goes for /scratch
We already implemented this a while back. ;)
Downloads of packages (and logs/results) is via https://kojipkgs.fedoraproject.org (this is a squid proxy in front of koji, using the same storage).
it uses our official wildcard *.fedoraproject.org ssl cert.
https://koji.fedoraproject.org has to use it's own self signed one as thats how it authenticates clients to do builds, but nothing is downloaded from there.
Let me know if you still see any issues anywhere...