[Buildroot] [PATCH] toolchain: switch linaro to https urls

Yann E. MORIN yann.morin.1998 at free.fr
Wed Mar 9 21:59:03 UTC 2016


Peter, All,

On 2016-03-09 22:51 +0100, Peter Korsgaard spake thusly:
> >>>>> "Yann" == Yann E MORIN <yann.morin.1998 at free.fr> writes:
> 
>  > Jason, All,
>  > On 2016-03-09 11:40 -0800, Jason Abele spake thusly:
>  >> From: Jason Abele <jason at nextthing.co>
>  >> 
>  >> Signed-off-by: Jason Abele <jason at nextthing.co>
> 
>  > Acked-by: "Yann E. MORIN" <yann.morin.1998 at free.fr>
> 
>  >> ---
>  >> It looks like releases.linaro.org is no longer available without ssl.
>  >> If this change is permanent, we should probably fix the urls.
> 
>  > Even if the http URLs return to operational in the future, we want
>  > to keep the https ones anyway.
> 
> Do we? With the package hashes, https doesn't really buy anything, and
> we sometimes have issues with certificates and (old versions) wget.

Well, except for oldish wget and new certs, https i sbetter, not because
it provides authentication of the downloads (which is what our hashes
are for), but because it also /conceals/ the actual download from prying
eyes.

BTW, we have 131 packages on https, plus the 292 Github-hosted packages
also on https. ;-)

So yes, https is better than http. Always.

Regards,
Yann E. MORIN.

-- 
.-----------------.--------------------.------------------.--------------------.
|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 223 225 172 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |
'------------------------------^-------^------------------^--------------------'


More information about the buildroot mailing list