id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	launchpad_bug
2414	tell ActiveState to fix their download links for ActivePerl to be https	daira	daira	"This affects building pyOpenSSL (see [source:docs/build/build-pyOpenSSL.rst]).

I sent this message via https://www.activestate.com/company/contact-us :
----
At https://www.activestate.com/activeperl/downloads there are two download links for !ActivePerl. They download from http URLs, even though the files are available over https. This is unnecessarily insecure (and affects the security of build processes for other software dependent on !ActivePerl).

For example, the link to
https://www.activestate.com/activeperl/downloads/thank-you?dl=http://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi
should instead be
https://www.activestate.com/activeperl/downloads/thank-you?dl=https://downloads.activestate.com/ActivePerl/releases/5.20.2.2001/ActivePerl-5.20.2.2001-MSWin32-x86-64int-298913.msi

Please fix it, so that I don't have to tell people to manually change the link! Thanks.
----
I'll leave this ticket open until they've responded."	task	closed	normal	soon (release n/a)	packaging	n/a	was already fixed	ActivePerl pyOpenSSL windows security