From 30e6e7c605e506448f12365eed2aa56faba71b2e Mon Sep 17 00:00:00 2001 From: David Hicks Date: Sat, 29 Jul 2017 20:48:45 +1000 Subject: [PATCH] bitcoincore.eclass: Always use HTTPS for accessing GitHub To prevent MITM attacks, always use HTTPS with GitHub domains. GitHub supports "Smart HTTPS" git which means that shallow clones are possible over HTTPS. Don't use a git:// fallback because this would allow an attacker to always force fallback to an unsafe protocol. --- eclass/bitcoincore.eclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eclass/bitcoincore.eclass b/eclass/bitcoincore.eclass index 6144fb8ee68c..22bc5db1df75 100644 --- a/eclass/bitcoincore.eclass +++ b/eclass/bitcoincore.eclass @@ -131,7 +131,7 @@ HOMEPAGE="http://bitcoincore.org/" if [ -z "$BITCOINCORE_COMMITHASH" ]; then EGIT_PROJECT='bitcoin' - EGIT_REPO_URI="git://github.com/bitcoin/bitcoin.git https://github.com/bitcoin/bitcoin.git" + EGIT_REPO_URI="https://github.com/bitcoin/bitcoin.git" else SRC_URI="https://github.com/${MyPN}/${MyPN}/archive/${BITCOINCORE_COMMITHASH}.tar.gz -> ${MyPN}-v${PV}${BITCOINCORE_SRC_SUFFIX}.tgz" if [ -z "${BITCOINCORE_NO_SYSLIBS}" ]; then -- 2.26.2