From 2c28cab5aa03afabb3f0d65341ca235cefbabb17 Mon Sep 17 00:00:00 2001 From: Fernando Fernandez Mancera Date: Thu, 31 Aug 2023 14:57:10 +0200 Subject: [PATCH] Revert "Use https instead of http" Connectivity check should work fine with the HTTP URI; if there are problems with that in specific environments, they need to be understood and explained. But more importantly, this change breaks captive portal detection, which is one of the main purposes of connectivity check. A captive portal is detected by NM by comparing the content returned from the connectivity URI with a well-known content; if it's different then we assume someone is hijacking the request (via DNS poisoning or other means). With HTTPS this mechanism doesn't work because NM is not able to get the content from the redirected URI due to certificate verification failure. This reverts commit 6e53c1b52e0d603d6f7512750e8a8105c7331d11. --- 20-connectivity-fedora.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/20-connectivity-fedora.conf b/20-connectivity-fedora.conf index e06efc0..5c9476a 100644 --- a/20-connectivity-fedora.conf +++ b/20-connectivity-fedora.conf @@ -5,6 +5,6 @@ # strict. Check "/proc/sys/net/ipv4/conf/*/rp_filter". [connectivity] enabled=true -uri=https://fedoraproject.org/static/hotspot.txt +uri=http://fedoraproject.org/static/hotspot.txt response=OK interval=300