On Sun, Feb 21, 2021 at 08:45:08AM -0500, Albretch Mueller wrote: > as I tried to download debian, I noticed that the download was being > redirected real time (which in itself doesn't necessarily have to mean > bad), what I found a worrying was that: > > 1) as I used a known public hotspot connection, there was a new > hotspot advertising itself as "Wifi4EU" (of course, I didn't bite that > bait) > > 2) getting a connection through (apparently) the right hotspot took > way more time than expected > > 3) downloads were being redirected real time > > 4) the usual server side responses were not being produced, just: > > WARNING: certificate common name `ftp.acc.umu.se' doesn't match > requested host name `chuangtzu.ftp.acc.umu.se'. > 2021-02-17 11:14:47 > URL:https://chuangtzu.ftp.acc.umu.se/debian-cd/current/amd64/iso-dvd/debian-10.8.0-amd64-DVD-2.iso > [4697370624/4697370624] -> "debian-10.8.0-amd64-DVD-2.iso" [1] > > WARNING: certificate common name `ftp.acc.umu.se' doesn't match > requested host name `laotzu.ftp.acc.umu.se'. > 2021-02-17 11:46:46 > URL:https://laotzu.ftp.acc.umu.se/debian-cd/current/amd64/iso-dvd/debian-10.8.0-amd64-DVD-3.iso > [4679073792/4679073792] -> "debian-10.8.0-amd64-DVD-3.iso" [1] > > 5) the mirror debian site (ftp.acc.umu.se) had smelly prefixes as > subdomains (apparently Chinese transliterations) {chuangtzu, laotzu} >
No idea what is happening with WiFi hotspots. Are you trying to download the files for DVD via http or https? Debian cd images are normally available to download via http - it's quite difficult to get https to work for all the world's mirrors. cdimage.debian.org itself is housed at the university of Umeea in Sweden. There are other mirrors which may be closer. If you already have a Debian machine running - and from previous responses to the list I don't think you do - you could use jigdo-file and download the images by building them in pieces from a nearby mirror - which is often faster. The download process also is able to be restarted in the event of any interruption. Checksums are automatically calculated and GPG keys are also checked. [For the members of the Debian media team, this is the preferred way to transfer images around internally between machines for verification.] > 6) whois registry for umu.se > > $ whois um.se > # Copyright (c) 1997- The Swedish Internet Foundation. > # All rights reserved. > # The information obtained through searches, or otherwise, is protected > # by the Swedish Copyright Act (1960:729) and international conventions. > # It is also subject to database protection according to the Swedish > # Copyright Act. > # Any use of this material to target advertising or > # similar activities is forbidden and will be prosecuted. > # If any of the information below is transferred to a third > # party, it must be done in its entirety. This server must > # not be used as a backend for a search engine. > # Result of search for registered domain names under > # the .se top level domain. > # > This whois printout is printed with UTF-8 encoding. > # > state: active > domain: um.se > holder: (not shown) > admin-c: - > tech-c: - > billing-c: - > created: 2014-12-02 > modified: 2020-11-16 > expires: 2021-12-02 > transferred: 2017-08-24 > nserver: ns1.nameisp.info > nserver: ns2.nameisp.info > dnssec: unsigned delegation > registry-lock: unlocked > status: ok > registrar: www.NameSRS.com > $ > Typo - ftp.umu.se > 7) the md5 and sha1 hashes that I computed could not be found online > > 0296cfbeaf3823055901d7ad2077a077 > 0b742d83d23207db9a24553100d4155eb8c701bf debian > 10.8.0-amd64-DVD-2.iso > 37baf26293b8132fe95b4bd19262ca6b > 122a2612ed63ff89db56eec0765e87268bf72318 debian > 10.8.0-amd64-DVD-3.iso > > I have kept those files in hard drives/computers I never connect to > the Internet (that, to me, is the only way to do something with some > "privacy"/security). I later downloaded what seem to be the right > files, anyway. They would make for some easy and nice forensic > analysis (just extracting the content of those iso files, using find > and diff) whenever I find the time to do so. > > lbrtchx > All best, as ever, Hope the above is helpful. Andy C.
