Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Mar 2017 10:18:18 -0700
From:      Adam Weinberger <adamw@adamw.org>
To:        Tijl Coosemans <tijl@FreeBSD.org>
Cc:        FreeBSD Ports Management Team <portmgr@FreeBSD.org>, freebsd-ports <ports@FreeBSD.org>, gerald@pfeifer.com, Jan Beich <jbeich@freebsd.org>
Subject:   Re: bsd.sites.mk: Do we prefer http or https (or both)
Message-ID:  <727BA28F-ECA5-4094-B1D1-E8F122770D56@adamw.org>
In-Reply-To: <20170311181339.58bcf2a8@kalimero.tijl.coosemans.org>
References:  <20170311113355.0f3f8b77@kalimero.tijl.coosemans.org> <20170311121851.715B55859@freefall.freebsd.org> <20170311181339.58bcf2a8@kalimero.tijl.coosemans.org>

next in thread | previous in thread | raw e-mail | index | archive | help
> On 11 Mar, 2017, at 10:13, Tijl Coosemans <tijl@FreeBSD.org> wrote:
>=20
> On Sat, 11 Mar 2017 12:18:51 +0000 (UTC) jbeich@freebsd.org (Jan =
Beich) wrote:
>> Tijl Coosemans <tijl@FreeBSD.org> writes:
>>> On Sat, 11 Mar 2017 10:53:01 +0100 (CET) Gerald Pfeifer =
<gerald@pfeifer.com> wrote:
>>>> As some of you may have seen, I have done a bit of work on
>>>> bsd.sites.mk recently.
>>>>=20
>>>> One question I ran into:  If a site offers both HTTPS and HTTP,=20
>>>> which of the two do we prefer?  (Or do we want to list both?) =20
>>>=20
>>> https first for people that run 'make makesum'. =20
>>=20
>> It was made MITM-friendly sometime ago.
>>=20
>> https://svnweb.freebsd.org/changeset/ports/324051
>=20
> Ugh, can portmgr approve the attached =
patch?<fetchenv.patch>_______________________________________________

If distfiles from sites with invalid certificates won't fetch for =
end-users, they won't fetch during makesum either.

# Adam


--=20
Adam Weinberger
adamw@adamw.org
https://www.adamw.org





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?727BA28F-ECA5-4094-B1D1-E8F122770D56>