We found that file storage hosted on mirror.freepbx.org/provisioner configured without allowing access through https. But there is an HSTS policy defined for mirror.freepbx.org that made it inaccessible after someone tries to reach it using HTTPS. Seems to be that mirror.freepbx.org should allow access through HTTPS.
The second point is the provisioned files in http://mirror.freepbx.org/provisioner/v3/provisioner_net.tgz. I found the issue in code that I want to correct, but I am unable to found where it does locate. Could someone point the location of the repository for this code?