From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#27778: Changing package source URLs from git:// to https:// Date: Thu, 20 Jul 2017 18:06:31 -0400 Message-ID: <20170720220631.GB31573@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ZoaI/ZTpAVc4A5k6" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37993) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dYJb8-0008Vo-B4 for bug-guix@gnu.org; Thu, 20 Jul 2017 18:07:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dYJb5-0007II-1h for bug-guix@gnu.org; Thu, 20 Jul 2017 18:07:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:47441) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dYJb4-0007I5-UH for bug-guix@gnu.org; Thu, 20 Jul 2017 18:07:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dYJb4-00019E-Jy for bug-guix@gnu.org; Thu, 20 Jul 2017 18:07:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37811) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dYJae-0008UA-AU for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dYJab-0006zq-3c for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:36 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:33407) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dYJaa-0006zK-Ut for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:33 -0400 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 3830E7E4AA for ; Thu, 20 Jul 2017 18:06:32 -0400 (EDT) Content-Disposition: inline List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: 27778@debbugs.gnu.org --ZoaI/ZTpAVc4A5k6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline There are several packages that fetch their sources over the Git protocol. That is, 'git://'. This protocol is unauthenticated, which is not great, although not 100% terrible since we know the hash of what we are trying to fetch. Also, it uses port 9418 which is blocked more often than 443 or 80. Let's change these packages to use HTTPS or HTTP! ~/guix/gnu/packages% grep -rI 'git://' pumpio.scm: (url "git://pumpa.branchable.com/") fltk.scm: (url "git://git.tuxfamily.org/gitroot/non/fltk.git") microcom.scm: (url "git://git.pengutronix.de/git/tools/microcom.git") rdesktop.scm: (url "git://github.com/FreeRDP/FreeRDP.git") gnunet.scm: (url "git://git.sv.gnu.org/guix/gnunet.git") suckless.scm: (url "git://git.2f30.org/human.git") admin.scm: (url "git://github.com/TrilbyWhite/interrobang") embedded.scm: (url "git://git.zapb.de/libjaylink.git") embedded.scm: (url "git://git.code.sf.net/p/openocd/code.git") version-control.scm: (url "git://myrepos.branchable.com/myrepos") audio.scm: (url "git://git.ardour.org/ardour/ardour.git") emacs.scm: (url "git://git.hcoop.net/git/bpt/emacs.git") messaging.scm: (url "git://git.psyced.org/git/psyclpc") music.scm: (url "git://git.tuxfamily.org/gitroot/non/non.git") python.scm: (url "git://github.com/tgalal/python-axolotl-curve25519") web.scm: (url "git://git.libwebsockets.org/libwebsockets") gnome.scm: (url "git://git.gnome.org/byzanz") guile.scm: (url "git://git.hcoop.net/git/bpt/guile.git") guile.scm: (url "git://dthompson.us/guile-syntax-highlight.git") java.scm: (url "git://git.savannah.gnu.org/classpath.git") shells.scm: (url "git://github.com/rakitzis/rc.git") --ZoaI/ZTpAVc4A5k6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllxKWcACgkQJkb6MLrK fwi/zw//SimsSLd+vM0EDbz1KFfrexddn1LVCRiZY/+hoxkLgEPoIcgu9avWE/fm 2QaLo1jxh5ciV0OJEgRbYNCK3mox9TukbfSw93axbxJiKDzr5lw13pfg/Tt5IvdP Jz23TUHOAqxAq+8j9IZfqh1NSe7ly3xw3vamtbRzQIn5zO/w1/JcdxnOVum/RPzs YEGAaJ8Fca55ZyQiPKdi0tqFKgBTQmZcQE/3Gfy5jogZYXTEa4uzfmEiDiS6bnZ6 LuTommm6HoC6hPQmFrCOJSSTWP+52kMtskJS0oZRMhJ7mrpPDdea4f9nidt2wkyf Alu1P16tHr8SjlI1rB7kKEijvmEOIQdbK0dlUVlK1KWi3dtTDoQY23ZdJai1yBdo PYBnmvLItoCoMs58eEAW7LxAg+zVVnlR8lSVh0X0d/Thbl/l+pNAFaRb8YqpVkdW 29omrVJXLgZYbasc1Y4nI/5jQV5aQF61w8O7BZTCaRgoTxK5UO7RAPuee40vTiaP cDKsxI9khy46m9yoeuEqrvItL5VncEMiYhJAptkhAV5njvn4uvaY34d/Pfu5oDX+ xOccKq4bz5R0wX1pJGb1eihSYFPkeId46pFFBiRpNEsJ1y0YBSVEJiBM6vzsF8zt 8Y/kbv9uqtohNbI5aLbJrVdeuE3i8vRrSdixuRKqdNIEs7emMfg= =ktJK -----END PGP SIGNATURE----- --ZoaI/ZTpAVc4A5k6--