[Bug 1330619] [NEW] apt https transport not encoding '+', breaks S3

[Phil Pennock]

Public bug reported:

Encountered with Trusty, apt package 1.0.1ubuntu2

When using a repository in `/etc/apt/sources.list.d` which is `https`
pointing to a site provided by Amazon's S3 storage system, `apt-get`
will fail with a "403 Forbidden" error message if the package name has a
"+" in it.

Reproducible with curl -- S3 does not like unencoded "+" signs, on
either HTTP or HTTPS.

`apt-get` works against S3 with HTTP but does not work with HTTPS, which
strongly suggests a difference in how package names are encoded for the
transport request.

** Affects: apt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1330619

Title:
  apt https transport not encoding '+', breaks S3

Status in “apt” package in Ubuntu:
  New

Bug description:
  Encountered with Trusty, apt package 1.0.1ubuntu2

  When using a repository in `/etc/apt/sources.list.d` which is `https`
  pointing to a site provided by Amazon's S3 storage system, `apt-get`
  will fail with a "403 Forbidden" error message if the package name has
  a "+" in it.

  Reproducible with curl -- S3 does not like unencoded "+" signs, on
  either HTTP or HTTPS.

  `apt-get` works against S3 with HTTP but does not work with HTTPS,
  which strongly suggests a difference in how package names are encoded
  for the transport request.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1330619/+subscriptions