Update dist packages to https

[albertvolkman]

With this update-

composer/composer#4968

Composer installs are now failing for me with-

Failed to download drupal/ from dist: Your configuration does not allow connection to http://ftp.drupal.org. See https://getcomposer.org/doc/06-config.md#secure-http for details.

When doing a composer show , it's showing that the dist packages are being served over http. I'm thinking the answer here is to update those links to utilize https?

[webflo]

The error message looks suspicious. Failed to download drupal/ from dist. "drupal/" is not a valid package name.

I updated all URLs to https a few weeks ago. Have you found some packages that are still http?

[albertvolkman]

Ah, sorry, Github apparently stripped out the <>'s. This example was admin_menu.

[webflo]

All URLs in Drupal Packagist are HTTPS. I think your lockfile contains old urls. Try to replace http with https.

I tired "composer show drupal/admin_menu 7.3.0-rc1" as example.

[albertvolkman]

My apologies... earlier I had deleted my composer.lock file and re-generated, but it was failing... but I think that was related to git.drupal.org being down. Thanks & closing.

[michaelrkn]

When I run:

$ composer create-project drupal/drupal my_site_name

I get:

Installing drupal/drupal (8.0.5)
  - Installing drupal/drupal (8.0.5)
    Cloning b35d70c688463fb3722c9ea4918f61033da37a4a


  [Composer\Downloader\TransportException]                                     
  Your configuration does not allow connection to http://git.drupal.org/proje  
  ct/drupal.git. See https://getcomposer.org/doc/06-config.md#secure-http for  
   details.

I tried composer clear-cache but that doesn't seem to help. Is there something that still needs to be moved to https, or am I missing something?

[webflo]

Hi, this is a known issue. You can track it on drupal.org https://www.drupal.org/node/2689133. I personally don't have access to this Package on Packagist and can't the git url. You can disable this new security feature via the secure-http option. https://getcomposer.org/doc/06-config.md#secure-http