Date: Sat, 11 Mar 2017 18:13:39 +0100 From: Tijl Coosemans <tijl@FreeBSD.org> To: portmgr@FreeBSD.org Cc: jbeich@freebsd.org (Jan Beich), gerald@pfeifer.com, ports@FreeBSD.org Subject: Re: bsd.sites.mk: Do we prefer http or https (or both) Message-ID: <20170311181339.58bcf2a8@kalimero.tijl.coosemans.org> In-Reply-To: <20170311121851.715B55859@freefall.freebsd.org> References: <20170311113355.0f3f8b77@kalimero.tijl.coosemans.org> <20170311121851.715B55859@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--MP_/.uJhgdCw0I3_CL2xYgym22i Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Disposition: inline On Sat, 11 Mar 2017 12:18:51 +0000 (UTC) jbeich@freebsd.org (Jan Beich) wrote: > Tijl Coosemans <tijl@FreeBSD.org> writes: >> On Sat, 11 Mar 2017 10:53:01 +0100 (CET) Gerald Pfeifer <gerald@pfeifer.com> wrote: >>> As some of you may have seen, I have done a bit of work on >>> bsd.sites.mk recently. >>> >>> One question I ran into: If a site offers both HTTPS and HTTP, >>> which of the two do we prefer? (Or do we want to list both?) >> >> https first for people that run 'make makesum'. > > It was made MITM-friendly sometime ago. > > https://svnweb.freebsd.org/changeset/ports/324051 Ugh, can portmgr approve the attached patch? --MP_/.uJhgdCw0I3_CL2xYgym22i Content-Type: text/x-patch Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=fetchenv.patch Index: Mk/bsd.port.mk =================================================================== --- Mk/bsd.port.mk (revision 435950) +++ Mk/bsd.port.mk (working copy) @@ -2007,7 +2007,9 @@ BUILD_FAIL_MESSAGE+= Try to set MAKE_JOB .include "${PORTSDIR}/Mk/bsd.ccache.mk" +.if !make(makesum) FETCH_ENV?= SSL_NO_VERIFY_PEER=1 SSL_NO_VERIFY_HOSTNAME=1 +.endif FETCH_BINARY?= /usr/bin/fetch FETCH_ARGS?= -Fpr FETCH_REGET?= 1 --MP_/.uJhgdCw0I3_CL2xYgym22i--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170311181339.58bcf2a8>