[Bug 1087543] Update Released

[Colin Watson]

The verification of this Stable Release Update has completed
successfully and the package has now been released to -updates.
Subsequently, the Ubuntu Stable Release Updates Team is being
unsubscribed and will not receive messages about this bug report.  In
the event that you encounter a regression using the package from
-updates please report a new bug using ubuntu-bug and tag the bug report
regression-update so we can easily find any regresssions.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1087543

Title:
  apt-get does not properly reuse connections with https

Status in “apt” package in Ubuntu:
  Fix Released
Status in “apt” source package in Precise:
  Fix Released

Bug description:
  [Impact]

   * Apt does not re-use https connections.  This results in a
  significant performance hit.

   * Additionally the hosts of mirrors are experiencing unnecessarily
  high load due to this

  [Test Case]

   * Run apt-get -update using https connections.  It will be noticably
  slower in comparison to after this change

  [Regression Potential]

   * This fixes apt, by changing the way it uses curl, such that only
  problematic error codes cause failure.  But this may only happen if
  the user is using https, http is not affected by this patch.

   * Might result in zero length files, or updates not being downloaded
  over https connectiosn.

   * https connections hanging in the event that the above logic does
  not correctly handle error cases.

  [Other Info]
   * There's only a slight chance to hit any regressions, as the above is mostly just thinking well outside of the box.
   
   * This is already in Saucy.

   * This is not imperative to be pulled into precise, but it would be
  nice.

   * This is really more of an enhancement than a bug fix.

   * I have been using this patch for over 5 months now with no negative
  side affects.

   * I have been told that this patch has been deployed in a large
  (multi-thousand install base) organization with no negative side
  affects as well.

  --------------------------------------------------------------------------------

  When using an https: connection, apt-get does not properly reuse
  connections. Because https setup costs can be quite high, this can
  cause much slowdown when, for example, many different distributions on
  the same server need to be checked.

  I believe the attached patch addresses the difficulty.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1087543/+subscriptions