Open
Description
What version of Go are you using (go version)?
Does this issue reproduce with the latest release?
Yes.
What operating system and processor architecture are you using (go env)?
N/A
What did you do?
The download of a Go release redirects to https://dl.google.com/go but the download of the same release's sh256 checksum does not.
For example:
$ curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz
<a href="https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz">Found</a>.
$ curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz.sha256
<!DOCTYPE html>
<html>
<head>
<meta name="go-import" content="golang.org/dl git
https://go.googlesource.com/dl">
<meta http-equiv="refresh" content="0;
url=https://golang.org/dl/#go1.15.2.linux-amd64.tar.gz.sha256">
</head>
<body>
Nothing to see here; <a
href="https://golang.org/dl/#go1.15.2.linux-amd64.tar.gz.sha256">move
along</a>.
</body>
</html>
The sha256 URL is available at https://dl.google.com/go by appending .sha256 to the end of a release:
$ curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256
b49fda1ca29a1946d6bb2a5a6982cf07ccd2aba849289508ee0f9918f6bb4552
To summarize,
- ✔️
curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz -> https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz - 🚫
curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz.sha256 -> curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256 - ✔️
curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz - ✔️
curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256
What did you expect to see?
It would be nice that a release's sha256 can be redirected from https://golang.org/dl to https://dl.google.com/go, the same as its corresponding release. This makes the download of a release and its checksum both accessible from https://golang.org/dl.
What did you see instead?
The download of a release's checksum is not possible from the host https://golang.org/dl.