commit: 30e6e7c605e506448f12365eed2aa56faba71b2e Author: David Hicks <david <AT> hicks <DOT> id <DOT> au> AuthorDate: Sat Jul 29 10:48:45 2017 +0000 Commit: Michał Górny <mgorny <AT> gentoo <DOT> org> CommitDate: Sun Jul 30 09:15:49 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=30e6e7c6
bitcoincore.eclass: Always use HTTPS for accessing GitHub To prevent MITM attacks, always use HTTPS with GitHub domains. GitHub supports "Smart HTTPS" git which means that shallow clones are possible over HTTPS. Don't use a git:// fallback because this would allow an attacker to always force fallback to an unsafe protocol. eclass/bitcoincore.eclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eclass/bitcoincore.eclass b/eclass/bitcoincore.eclass index 6144fb8ee68..22bc5db1df7 100644 --- a/eclass/bitcoincore.eclass +++ b/eclass/bitcoincore.eclass @@ -131,7 +131,7 @@ HOMEPAGE="http://bitcoincore.org/"; if [ -z "$BITCOINCORE_COMMITHASH" ]; then EGIT_PROJECT='bitcoin' - EGIT_REPO_URI="git://github.com/bitcoin/bitcoin.git https://github.com/bitcoin/bitcoin.git"; + EGIT_REPO_URI="https://github.com/bitcoin/bitcoin.git"; else SRC_URI="https://github.com/${MyPN}/${MyPN}/archive/${BITCOINCORE_COMMITHASH}.tar.gz -> ${MyPN}-v${PV}${BITCOINCORE_SRC_SUFFIX}.tgz" if [ -z "${BITCOINCORE_NO_SYSLIBS}" ]; then
