What version of Go are you using (go version)?

go version go1.9.2 linux/amd64

Does this issue reproduce with the latest release?

✅

What operating system and processor architecture are you using (go env)?

GOARCH="amd64"
GOBIN=""
GOEXE=""
GOHOSTARCH="amd64"
GOHOSTOS="linux"
GOOS="linux"
GOPATH="/home/terin/go"
GORACE=""
GOROOT="/usr/lib/go"
GOTOOLDIR="/usr/lib/go/pkg/tool/linux_amd64"
GCCGO="gccgo"
CC="gcc"
GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build604286265=/tmp/go-build -gno-record-gcc-switches"
CXX="g++"
CGO_ENABLED="1"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"

What did you do?

Ran go get -v -insecure example.org/pkg/foo whilst "example.org" was directed to a local HTTP server (via host file).

What did you expect to see?

Code downloaded from a VCS at $GOPATH/src/example.org/pkg/foo.

What did you see instead?

Fetching https://example.org/pkg/foo?go-get=1
https fetch failed: Get https://example.org/pkg/foo?go-get=1: http: server gave HTTP response to HTTPS client
Fetching http://example.org/pkg/foo?go-get=1
Parsing meta tags from http://example.org/pkg/foo?go-get=1 (status code 500)
package example.org/pkg/foo: unrecognized import path "example.org/pkg/foo" (parse http://example.org/pkg/foo?go-get=1: no go-import meta tags ())

The behavior of the server is as follows:

• If the request method is not GET or HEAD, responds with a 405 Method Not Allowed
• If the request URL path does not end in a slash, it responds with a 301 Moved Permanently to the URL path with the slash appended
• If the request URL contains the query parameter "go-get=1", it responds with a basic HTTP page with the go-imports meta tag
• If the request URL does not contain the query parameter, it responds with a 303 See Other redirect to godoc.org

Due to an issue in the server's HTTP muxer implementation¹, the query parameters during the 301 redirect are lost. go get dutifully follows the redirect, and as the request no longer contains the "go-get" parameter, it gets and follows the redirection to godoc.org, which responds with a 500 HTTP error.

This seems to be allowed behavior from the HTTP specification; the server should include the query parameters in the Location header to preserve semantics. However, I still found the behavior of go get surprising, both that it will sends requests without the "go-get" query parameter, and that it silently follows redirects off the import path domain.

I propose change the behavior of go get to always include the "go-get" query parameter, even after redirects, and to log the redirections when the "-v" flag is provided.