IIUC all the update sites are http and https so that you do not get a secure content warning if using the browser based metadata download (which is the only way to get the metadata if your Jenkins is isolated from the internet)
In any case the metadata is signed to ensure integrity and the metadata includes the content hashes of the plugins On 10 May 2016 at 10:33, Mladen Marev <mladen.ma...@gmail.com> wrote: > Hello, > > is there any HTTPS mirror which I can use as a Jenkins update site, for > both - the Jenkins itself and plugins. I mean not only the main page but > also the redirected one, as usually the download is redirected to some > other URLs. > > Thanks. > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/aea04815-1fab-4116-baab-aa2432061981%40googlegroups.com > <https://groups.google.com/d/msgid/jenkinsci-users/aea04815-1fab-4116-baab-aa2432061981%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CA%2BnPnMxWqBz%2B%3DdunESo0mb9YpYBuWGHHbDF%2BE51GEPW0cnAREA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.