Skip to content

Commit d8bc47f

Browse files
committed
depends: switch to secure download of all dependencies
Some dependency sources were downloaded via http, even though https (SSL/TLS) options are available. Even if we potentially check the integrity of the downloaded files via hash comparison, we should make use of this additional security layer. bdb.mk fontconfig.mk freetype.mk libX11.mk libXau.mk libXext.mk libxcb.mk native_cctools.mk native_cdrkit.mk xcb_proto.mk xextproto.mk xproto.mk xtrans.mk zlib.mk miniupnp was switched to official project mirror with SSL support
1 parent 7263424 commit d8bc47f

16 files changed

+18
-17
lines changed

depends/packages.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,9 @@ Each package is required to define at least these variables:
1414
placeholder such as 1.0 can be used.
1515

1616
$(package)_download_path:
17-
Location of the upstream source, without the file-name. Usually http or
18-
ftp.
17+
Location of the upstream source, without the file-name. Usually http, https
18+
or ftp. Secure transmission options like https should be preferred if
19+
available.
1920

2021
$(package)_file_name:
2122
The upstream source filename available at the download path.

depends/packages/bdb.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=bdb
22
$(package)_version=4.8.30
3-
$(package)_download_path=http://download.oracle.com/berkeley-db
3+
$(package)_download_path=https://download.oracle.com/berkeley-db
44
$(package)_file_name=db-$($(package)_version).NC.tar.gz
55
$(package)_sha256_hash=12edc0df75bf9abd7f82f821795bcee50f42cb2e5f76a6a281b85732798364ef
66
$(package)_build_subdir=build_unix

depends/packages/fontconfig.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=fontconfig
22
$(package)_version=2.12.1
3-
$(package)_download_path=http://www.freedesktop.org/software/fontconfig/release/
3+
$(package)_download_path=https://www.freedesktop.org/software/fontconfig/release/
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=b449a3e10c47e1d1c7a6ec6e2016cca73d3bd68fbbd4f0ae5cc6b573f7d6c7f3
66
$(package)_dependencies=freetype expat

depends/packages/freetype.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=freetype
22
$(package)_version=2.7.1
3-
$(package)_download_path=http://download.savannah.gnu.org/releases/$(package)
3+
$(package)_download_path=https://download.savannah.gnu.org/releases/$(package)
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=3a3bb2c4e15ffb433f2032f50a5b5a92558206822e22bfe8cbe339af4aa82f88
66

depends/packages/libX11.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=libX11
22
$(package)_version=1.6.2
3-
$(package)_download_path=http://xorg.freedesktop.org/releases/individual/lib/
3+
$(package)_download_path=https://xorg.freedesktop.org/releases/individual/lib/
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=2aa027e837231d2eeea90f3a4afe19948a6eb4c8b2bec0241eba7dbc8106bd16
66
$(package)_dependencies=libxcb xtrans xextproto xproto

depends/packages/libXau.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=libXau
22
$(package)_version=1.0.8
3-
$(package)_download_path=http://xorg.freedesktop.org/releases/individual/lib/
3+
$(package)_download_path=https://xorg.freedesktop.org/releases/individual/lib/
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=fdd477320aeb5cdd67272838722d6b7d544887dfe7de46e1e7cc0c27c2bea4f2
66
$(package)_dependencies=xproto

depends/packages/libXext.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=libXext
22
$(package)_version=1.3.2
3-
$(package)_download_path=http://xorg.freedesktop.org/releases/individual/lib/
3+
$(package)_download_path=https://xorg.freedesktop.org/releases/individual/lib/
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=f829075bc646cdc085fa25d98d5885d83b1759ceb355933127c257e8e50432e0
66
$(package)_dependencies=xproto xextproto libX11 libXau

depends/packages/libxcb.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=libxcb
22
$(package)_version=1.10
3-
$(package)_download_path=http://xcb.freedesktop.org/dist
3+
$(package)_download_path=https://xcb.freedesktop.org/dist
44
$(package)_file_name=$(package)-$($(package)_version).tar.bz2
55
$(package)_sha256_hash=98d9ab05b636dd088603b64229dd1ab2d2cc02ab807892e107d674f9c3f2d5b5
66
$(package)_dependencies=xcb_proto libXau xproto

depends/packages/miniupnpc.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
package=miniupnpc
22
$(package)_version=2.0.20180203
3-
$(package)_download_path=http://miniupnp.free.fr/files
3+
$(package)_download_path=https://miniupnp.tuxfamily.org/files/
44
$(package)_file_name=$(package)-$($(package)_version).tar.gz
55
$(package)_sha256_hash=90dda8c7563ca6cd4a83e23b3c66dbbea89603a1675bfdb852897c2c9cc220b7
66

depends/packages/native_cctools.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ $(package)_file_name=$($(package)_version).tar.gz
55
$(package)_sha256_hash=a09c9ba4684670a0375e42d9d67e7f12c1f62581a27f28f7c825d6d7032ccc6a
66
$(package)_build_subdir=cctools
77
$(package)_clang_version=3.7.1
8-
$(package)_clang_download_path=http://llvm.org/releases/$($(package)_clang_version)
8+
$(package)_clang_download_path=https://llvm.org/releases/$($(package)_clang_version)
99
$(package)_clang_download_file=clang+llvm-$($(package)_clang_version)-x86_64-linux-gnu-ubuntu-14.04.tar.xz
1010
$(package)_clang_file_name=clang-llvm-$($(package)_clang_version)-x86_64-linux-gnu-ubuntu-14.04.tar.xz
1111
$(package)_clang_sha256_hash=99b28a6b48e793705228a390471991386daa33a9717cd9ca007fcdde69608fd9

0 commit comments

Comments
 (0)