Closed
Description
The Flutter Maven repository (download.flutter.io
) can't be accessed via HTTPS because of a certificate error (wrong host). In my opinion you should be able to download the artifacts via HTTPS for security reasons. Is the repository available via another URL or can the certificate error be fixed?
Activity
dnfield commentedon Dec 19, 2019
@blasten @kf6gpe - we need to fix the certificate attached to
download.flutter.io
/download.flutter.dev
. Looks like it's using the one for*.storage.googleapis.com
, which triggers a bunch of warnings/errors over HTTPS.blasten commentedon Dec 23, 2019
+1. GCP storage only supports CNAME entries for custom domains, which doesn't allow HTTPS.
https://cloud.google.com/storage/docs/troubleshooting#https
If we think this is critical, then we might either need to migrate to Firebase hosting as suggested in the GCP storage doc or drop the custom domain and use https://storage.googleapis.com/download.flutter.io directly.
dnfield commentedon Dec 23, 2019
Would the setting up a load balancer option work out for us?
I think we should probably avoid firebase hosting for this - it will become tedious as we add more and more files (AFAIK it requires a complete local copy of your static assets to compare/upload - there's no way to just say "add these new assets").
If a load balancer doesn't work, I'd vote for just using the storage.googleapis.com domain directly. Will that have any negative impact on Chinese customers though?
skyred commentedon Feb 2, 2020
Cannot speak for the future, but currently https://storage.googleapis.com/download.flutter.io works in China.
dnfield commentedon Feb 2, 2020
@blasten what would it take to just use
storage.googleapis
directly?blasten commentedon Feb 4, 2020
very easily.
flutter/packages/flutter_tools/gradle/resolve_dependencies.gradle
Line 21 in 449f4a6
flutter/packages/flutter_tools/gradle/flutter.gradle
Line 44 in 2042c7d
jmagman commentedon Mar 5, 2020
Need to update docs as well https://flutter.dev/docs/development/add-to-app/android/project-setup#option-a---depend-on-the-android-archive-aar
jmagman commentedon Mar 5, 2020
Docs and sample updated.
flutter/website#3768
flutter/samples#355
github-actions commentedon Aug 16, 2021
This thread has been automatically locked since there has not been any recent activity after it was closed. If you are still experiencing a similar issue, please open a new bug, including the output of
flutter doctor -v
and a minimal reproduction of the issue.