[Qgis-psc] [Qgis-user] Accessing qGIS APT repositories using Tor

[Richard Duivenvoorde]

On 4/22/20 9:44 AM, Richard Duivenvoorde wrote:
> I've forwarded this to one of my Debian guru's :-)
> Maybe he has a clue.

Forwarded (thanks Sebastiaan):

"""
A known issue with CloudFlare is the non existence of a User_agend
header. Older version of ansible and Perl LWP did not have that by default.

With Tor Browser qgis.org/debian just works.

apt-transport-tor just adds some symlinks to be used by the aquire
methods, does not use/do somethgin with User-Agent AFAICS.

Wit tor+https://qgis.org/debian in sources.list you indeed get a "403
Forbidden" when doing `apt update -o Debug::Acquire::tor+https=true`:


0% [Connecting to SOCKS5h proxy (socks5h://127.0.0.1:9050)]http: SOCKS
proxy socks5h://127.0.0.1:9050 connection established to qgis.org
(0.0.0.0:0)
GET /debian/dists/sid/InRelease HTTP/1.1
Host: qgis.org
Cache-Control: max-age=0
Accept: text/*
User-Agent: Debian APT-HTTP/1.3 (2.0.2)


0% [Waiting for headers]Answer for:
tor+https://qgis.org/debian/dists/sid/InRelease
HTTP/1.1 403 Forbidden
Date: Wed, 22 Apr 2020 08:04:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Set-Cookie: __cfduid=d91590e20c5d0d3b27e46b6a8f6cd58081587542675;
expires=Fri, 22-May-20 08:04:35 GMT; path=/; domain=.qgis.org; HttpOnly;
SameSite=Lax
CF-Chl-Bypass: 1
Cache-Control: no-cache
X-Frame-Options: SAMEORIGIN
Expect-CT: max-age=604800,
report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 587dd5b87ffccc36-ZRH
cf-request-id: 024283e7460000cc361bba7200000001

Err:3 tor+https://qgis.org/debian sid InRelease
  403  Forbidden [IP: 127.0.0.1 9050]

Headers seem ok.

""" end forward

Mmm, but I think that is not a good example as we do not have sid:
https://qgis.org/debian/dists/

So I'd say: let him explain here why and how?

Regards,

Richard Duivenvoorde