From: David Hicks <david@hicks.id.au>
Date: Sat, 29 Jul 2017 10:48:45 +0000 (+1000)
Subject: bitcoincore.eclass: Always use HTTPS for accessing GitHub
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=30e6e7c605e506448f12365eed2aa56faba71b2e;p=gentoo.git

bitcoincore.eclass: Always use HTTPS for accessing GitHub

To prevent MITM attacks, always use HTTPS with GitHub domains. GitHub
supports "Smart HTTPS" git which means that shallow clones are possible
over HTTPS. Don't use a git:// fallback because this would allow an
attacker to always force fallback to an unsafe protocol.
---

diff --git a/eclass/bitcoincore.eclass b/eclass/bitcoincore.eclass
index 6144fb8ee68c..22bc5db1df75 100644
--- a/eclass/bitcoincore.eclass
+++ b/eclass/bitcoincore.eclass
@@ -131,7 +131,7 @@ HOMEPAGE="http://bitcoincore.org/"
 
 if [ -z "$BITCOINCORE_COMMITHASH" ]; then
 	EGIT_PROJECT='bitcoin'
-	EGIT_REPO_URI="git://github.com/bitcoin/bitcoin.git https://github.com/bitcoin/bitcoin.git"
+	EGIT_REPO_URI="https://github.com/bitcoin/bitcoin.git"
 else
 	SRC_URI="https://github.com/${MyPN}/${MyPN}/archive/${BITCOINCORE_COMMITHASH}.tar.gz -> ${MyPN}-v${PV}${BITCOINCORE_SRC_SUFFIX}.tgz"
 	if [ -z "${BITCOINCORE_NO_SYSLIBS}" ]; then