From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53064) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1drLWe-0003pR-8X for guix-patches@gnu.org; Mon, 11 Sep 2017 06:01:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1drLWY-0004YG-LC for guix-patches@gnu.org; Mon, 11 Sep 2017 06:01:08 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:51853) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1drLWY-0004Xo-EL for guix-patches@gnu.org; Mon, 11 Sep 2017 06:01:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1drLWY-0004iH-5E for guix-patches@gnu.org; Mon, 11 Sep 2017 06:01:02 -0400 Subject: bug#28324: [PATCH 0/2] Allow substitute downloads from unauthorized servers when they are undistinguishable Resent-To: guix-patches@gnu.org Resent-Message-ID: From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) References: <20170901215812.24934-1-ludo@gnu.org> Date: Mon, 11 Sep 2017 12:00:00 +0200 In-Reply-To: <20170901215812.24934-1-ludo@gnu.org> ("Ludovic \=\?utf-8\?Q\?Cou\?\= \=\?utf-8\?Q\?rt\=C3\=A8s\=22's\?\= message of "Fri, 1 Sep 2017 23:58:12 +0200") Message-ID: <874ls9blnj.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 28324-done@debbugs.gnu.org Hello! Ludovic Court=C3=A8s skribis: > This patch allows substitutes to be downloaded from an unauthorized > server (one whose public key is not in /etc/guix/acl), or from a server > that does not even sign substitutes, *provided* that server advertises > and serves the exact same content as one of the authorized servers. I went ahead and pushed these two patches: a9468b422 * substitute: Download from unauthorized sources that provide the= right content. 218f6ecca * substitute: Make substitute URLs a SRFI-39 parameter. Commit 21c2757f27061cd6647cb00797b1c6c85f3325e8 updates the =E2=80=98guix= =E2=80=99 package so that it contains this new feature. Ludo=E2=80=99.