I've been developing my mirror checker script for some time now, and I
spent most of the last day testing it and fixing up things / adding
better checks. This is the second week this weekly update has given
lots of errors. I'll make some comparisons with these results.

For the few mirrors I don't mention here, my script agrees with this
email.

My script doesn't yet support Updated and Integrity tests. It also
doesn't yet produce this email, nor the similar web page. All of these
are TODO items.

On Fri, 6 Sep 2019 16:37:01 +0100 Devuan Mirrors said :

> mirror.koddos.net/devuan/devuan....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

The official mirror list says "only usable via deb.devuan.org", so my
mirror checker doesn't bother to check it directly. It does check it
via the deb.devuan.org DNS-RR. The HTTP tests and DNS-RR tests passed.
My script doesn't do HTTPS checks on mirrors accessed via the
deb.devuan.org DNS-RR, as the mirrors should in theory NOT have the
deb.devuan.org certificate. During testing I noticed that some of them
"work" anyway.

In not so sure what to do about this, flag them as WARNING since they
should not do that? Check further to see if there is some sort of
valid cert that somehow passes my checks?

> devuan.ipacct.com/devuan....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

The official mirror list says this mirror doesn't support HTTPS, so I
don't test that. It's also not on the DNS-RR.

> devuan.packet-gain.de....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

The official mirror list says this mirror doesn't support HTTPS, so I
don't test that. It does pass the other tests.

> devuan.c3sl.ufpr.br....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

The official mirror list says this mirror doesn't support HTTPS, so I
don't test that. It does pass the other tests.

> espejito.fder.edu.uy/devuan....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

Not on the DNS-RR, all other tests pass.

> devuan.m10k.jp....
>       http: [OK] https: [OK] DNS-RR: [OK] Updated: [SKIP] Integrity:
> [OK]

Not on the DNS-RR, all other tests pass.


> ==== faulty mirrors: ====
>
> pkgmaster.devuan.org (https)

All tests passed, including HTTPS.

> mirror.4isp.it (http)
> mirror.4isp.it (DNS-RR)

The official mirror list says "temporarily-offline", so my mirror
checker doesn't bother to check it. I should probably add an option to
check it anyway, so the admin of this mirror knows what works and what
doesn't.

> devuan.dcc.uchile.cl (http)
> devuan.dcc.uchile.cl (https)
> devuan.dcc.uchile.cl (DNS-RR)

The official mirror list says this mirror doesn't support HTTPS, the
HTTP tests all worked fine. It is not part of the DNS-RR as far as my
script can tell.

> devuan.mine.nu (https)

All HTTPS tests worked.

> mirror.vpgrp.io/devuan (http)
> mirror.vpgrp.io/devuan (https)
> mirror.vpgrp.io (DNS-RR)

The official mirror list says this mirror doesn't support HTTPS, the
HTTP tests all worked fine. It is not part of the DNS-RR as far as my
script can tell.

> ftp.fau.de/devuan (https)

All HTTPS tests passed.

> mirror.ungleich.ch/mirror/packages/devuan/ (http)
> mirror.ungleich.ch/mirror/packages/devuan/ (https)

No HTTPS support on this mirror according to the list. The other tests
passed.

> dist-mirror.fem.tu-ilmenau.de/devuan (http)
> dist-mirror.fem.tu-ilmenau.de/devuan (https)

This mirror has some issues due to it automatically redirecting HTTP to
HTTPS. I spent most of the day trying to sort this out, not sure
exactly where the problem was. Likely it shouldn't be doing that, since
not everyone has apt-transport-https installed. If you don't have that
installed and you use this mirror, things will probably break. It
should work fine if you actually use HTTPS with apt-transport-https.
I'd give this one a WARNING instead of an ERROR, but it's debatable
that maybe this should be flagged as an ERROR.

> mirrors.dotsrc.org/devuan (http)
> mirrors.dotsrc.org/devuan (https)
> mirrors.dotsrc.org (DNS-RR)

All checks passed with my checking script.

> devuan.bio.lmu.de (http)
> devuan.bio.lmu.de (https)
> devuan.bio.lmu.de (DNS-RR)

The official mirror list says "Active: not yet", so my mirror
checker doesn't bother to check it.

> mirror.stinpriza.org/devuan (http)
> mirror.stinpriza.org/devuan (https)
> mirror.stinpriza.org (DNS-RR)

It is not part of the DNS-RR as far as my script can tell. All other
tests worked fine.

> mirror.devuan.de (https)

The official mirror list says this mirror doesn't support HTTPS, the
HTTP tests all worked fine. It is not part of the DNS-RR as far as my
script can tell.



I'll keep working on my script. It may replace the script that
generates this email, and the similar web page one day.

--
A big old stinking pile of genius that no one wants
coz there are too many silver coated monkeys in the world.