What version of Go are you using (go version)?

https://github.com/golang/website/pull/24

Does this issue reproduce with the latest release?

Yes.

What operating system and processor architecture are you using (go env)?

N/A

What did you do?

The download of a Go release redirects to https://dl.google.com/go but the download of the same release's sh256 checksum does not.

For example:

$ curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz
<a href="https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz">Found</a>.

$ curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz.sha256
<!DOCTYPE html>
<html>
<head>
<meta name="go-import" content="golang.org/dl git
https://go.googlesource.com/dl">
<meta http-equiv="refresh" content="0;
url=https://golang.org/dl/#go1.15.2.linux-amd64.tar.gz.sha256">
</head>
<body>
Nothing to see here; <a
href="https://golang.org/dl/#go1.15.2.linux-amd64.tar.gz.sha256">move
along</a>.
</body>
</html>

The sha256 URL is available at https://dl.google.com/go by appending .sha256 to the end of a release:

$ curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256
b49fda1ca29a1946d6bb2a5a6982cf07ccd2aba849289508ee0f9918f6bb4552

To summarize,

  1. :heavy_check_mark: curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz -> https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz
  2. :no_entry_sign: curl https://golang.org/dl/go1.15.2.linux-amd64.tar.gz.sha256 -> curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256
  3. :heavy_check_mark: curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz
  4. :heavy_check_mark: curl https://dl.google.com/go/go1.15.2.linux-amd64.tar.gz.sha256

What did you expect to see?

It would be nice that a release's sha256 can be redirected from https://golang.org/dl to https://dl.google.com/go, the same as its corresponding release. This makes the download of a release and its checksum both accessible from https://golang.org/dl.

What did you see instead?

The download of a release's checksum is not possible from the host https://golang.org/dl.

Comment From: owenthereal

I took a stab at supporting this: https://github.com/golang/website/pull/24. PTAL.