search

chocolatey / package-validator

Windows service to validate packages conform to package standards
Apache License 2.0
31 stars 29 forks source link

URL Validation is failing for some dell packages, but URLs are valid #225

Closed gep13 closed 4 years ago

gep13 commented 4 years ago

The following packages:

https://chocolatey.org/packages/DellCommandUpdate/3.1.1 https://chocolatey.org/packages/dellcommandupdate-uwp/3.1.1

Are failing the URL validation of the package validator, with no clear reason why.

Digging deeper on this, with the help of @mkevenaar we were able to figure out that the server hosting this site is using Akamai. Doing a bit of googling turned up the following:

https://stackoverflow.com/a/43734309/671491

With the important part being:

Akamai will block you if you have the wrong order.

So, even though we are sending what is a valid request, the server returns a 403. It isn't even sort the order though...

When sending a request from package-validator, we send the header:

Connection: Keep-Alive

(which is controlled by .Net)

But Akamai is expecting:

Connection: keep-alive

Notice the lower-case k and a

/cc @flcdrg