diff options
author | Ulrich Kempken <Uli.Kempken@t-online.de> | 2019-05-19 19:58:29 +0000 |
---|---|---|
committer | Ulrich Kempken <Uli.Kempken@t-online.de> | 2019-05-20 22:25:52 +0000 |
commit | d8bc47fde46ca0711fa54a0d70ff5d066c708e50 (patch) | |
tree | 044b6b0bf3752278a83f01fc988ea4bd57aaefa4 /depends/packages.md | |
parent | 72634244580dc2e3c630ee27e47587080d064b68 (diff) | |
download | bitcoin-d8bc47fde46ca0711fa54a0d70ff5d066c708e50.tar.xz |
depends: switch to secure download of all dependencies
Some dependency sources were downloaded via http, even though https (SSL/TLS) options are available.
Even if we potentially check the integrity of the downloaded files via hash comparison, we should make
use of this additional security layer.
bdb.mk
fontconfig.mk
freetype.mk
libX11.mk
libXau.mk
libXext.mk
libxcb.mk
native_cctools.mk
native_cdrkit.mk
xcb_proto.mk
xextproto.mk
xproto.mk
xtrans.mk
zlib.mk
miniupnp was switched to official project mirror with SSL support
Diffstat (limited to 'depends/packages.md')
-rw-r--r-- | depends/packages.md | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/depends/packages.md b/depends/packages.md index 7c80362509..7d2bd4670d 100644 --- a/depends/packages.md +++ b/depends/packages.md @@ -14,8 +14,9 @@ Each package is required to define at least these variables: placeholder such as 1.0 can be used. $(package)_download_path: - Location of the upstream source, without the file-name. Usually http or - ftp. + Location of the upstream source, without the file-name. Usually http, https + or ftp. Secure transmission options like https should be preferred if + available. $(package)_file_name: The upstream source filename available at the download path. |