search

drupal-composer / drupal-packagist

:package: Drupal Packagist server to automatically build package information from projects on drupal.org
http://packagist.drupal-composer.org
28 stars 4 forks source link

Update dist packages to https #51

Closed albertvolkman closed 8 years ago

albertvolkman commented 8 years ago

With this update-

https://github.com/composer/composer/issues/4968

Composer installs are now failing for me with-

Failed to download drupal/ from dist: Your configuration does not allow connection to http://ftp.drupal.org. See https://getcomposer.org/doc/06-config.md#secure-http for details.

When doing a composer show , it's showing that the dist packages are being served over http. I'm thinking the answer here is to update those links to utilize https?

webflo commented 8 years ago

The error message looks suspicious. Failed to download drupal/ from dist. "drupal/" is not a valid package name.

I updated all URLs to https a few weeks ago. Have you found some packages that are still http?

albertvolkman commented 8 years ago

Ah, sorry, Github apparently stripped out the <>'s. This example was admin_menu.

webflo commented 8 years ago

All URLs in Drupal Packagist are HTTPS. I think your lockfile contains old urls. Try to replace http with https.

I tired "composer show drupal/admin_menu 7.3.0-rc1" as example.

albertvolkman commented 8 years ago

My apologies... earlier I had deleted my composer.lock file and re-generated, but it was failing... but I think that was related to git.drupal.org being down. Thanks & closing.

michaelrkn commented 8 years ago

When I run:

$ composer create-project drupal/drupal my_site_name

I get:

Installing drupal/drupal (8.0.5)
  - Installing drupal/drupal (8.0.5)
    Cloning b35d70c688463fb3722c9ea4918f61033da37a4a

  [Composer\Downloader\TransportException]                                     
  Your configuration does not allow connection to http://git.drupal.org/proje  
  ct/drupal.git. See https://getcomposer.org/doc/06-config.md#secure-http for  
   details.

I tried composer clear-cache but that doesn't seem to help. Is there something that still needs to be moved to https, or am I missing something?

webflo commented 8 years ago

Hi, this is a known issue. You can track it on drupal.org https://www.drupal.org/node/2689133. I personally don't have access to this Package on Packagist and can't the git url. You can disable this new security feature via the secure-http option. https://getcomposer.org/doc/06-config.md#secure-http