debian-packaging
/
linux
8
0
Fork 0
Code Releases Activity

debian/bin/abiupdate.py: Change default URLs to use https: scheme 

Since we don't use the Release and Packages files to verify the
packages we download, it's worth using TLS to reduce the risk of
a man-in-the-middle corrupting them.

ftp.ports.debian.org and security.debian.org don't support TLS
in general, so use deb.debian.org for the ports and security
archives.
This commit is contained in:
Ben Hutchings 2019-03-18 23:10:40 +00:00
parent 0e10941761
commit e3c916c6d7
2 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
debian/bin/abiupdate.py vendored
View File

@ -13,11 +13,11 @@ from debian_linux.abi import Symbols
from debian_linux.config import ConfigCoreDump
from debian_linux.debian import Changelog, VersionLinux
default_url_base = "http://deb.debian.org/debian/"
default_url_base_incoming = "http://incoming.debian.org/debian-buildd/"
default_url_base_ports = "http://ftp.ports.debian.org/debian-ports/"
default_url_base_ports_incoming = "http://incoming.ports.debian.org/"
default_url_base_security = "http://security.debian.org/"
default_url_base = "https://deb.debian.org/debian/"
default_url_base_incoming = "https://incoming.debian.org/debian-buildd/"
default_url_base_ports = "https://deb.debian.org/debian-ports/"
default_url_base_ports_incoming = "https://incoming.ports.debian.org/"
default_url_base_security = "https://deb.debian.org/debian-security/"
class url_debian_flat(object):

1
debian/changelog vendored
View File

@ -2,6 +2,7 @@ linux (4.19.28-3) UNRELEASED; urgency=medium
* debian/bin/abiupdate.py: Automatically select the correct archive to fetch
from
* debian/bin/abiupdate.py: Change default URLs to use https: scheme
-- Ben Hutchings <ben@decadent.org.uk> Mon, 18 Mar 2019 22:50:08 +0000