Change firmware update dowload links to use https instead of http about raspberrymatic

[jens-maus]

Already done, this ticket is closed...

[github-actions]

@MSoegtrop, the issue you reported does not seem to be reproducible by the maintainer of this project. Please provide additional information and more detail and please try to reproduce your problem with a fresh test installation and try to find other users having the same problems so that they can support your observations.

[jens-maus]

Sorry, but I cannot reproduce this issue here in a RaspberryMatic standalone installation. In addition, I can perfectly see that the device download URL are always https:// URLs. I also tried this in different browser like Chrome and Firefox and didn't note any issue here. See here for the browser console where you can see that the URL is perfectly a https URL:

So please elaborate further as I think this might be a HomeAssistant Addon issue only and try to identify the root cause by using your browser console and debugging.

[jens-maus]

Ok, after some further investigation, I think I have found the reason why this does not work for you. The issue seems to be that you might access home assistant via https, but the internal ingress based access to the WebUI is using plain http for performance reasons. But unfortunately the WebUI has some logic to identify if a connection is running under http or https, thus it will present plain http download links in that case but your main home assistant webui is running https, thus this will end up in that cross-security issue which some browsers simply don't like (having external http links in a https page).

[MSoegtrop]

@jens-maus : thanks for the investigations - more complicated than I thought. Would it make sense to always use https for firmware downloads? Since this goes to the internet - unlike usually local access to the WebUI - it would make sense from a security point of view to use https even if the WebUI uses http. Performance should not be relevant for such a download.