aboutsummaryrefslogtreecommitdiff
path: root/depends/packages.md
diff options
context:
space:
mode:
authorUlrich Kempken <Uli.Kempken@t-online.de>2019-05-19 19:58:29 +0000
committerUlrich Kempken <Uli.Kempken@t-online.de>2019-05-20 22:25:52 +0000
commitd8bc47fde46ca0711fa54a0d70ff5d066c708e50 (patch)
tree044b6b0bf3752278a83f01fc988ea4bd57aaefa4 /depends/packages.md
parent72634244580dc2e3c630ee27e47587080d064b68 (diff)
downloadbitcoin-d8bc47fde46ca0711fa54a0d70ff5d066c708e50.tar.xz
depends: switch to secure download of all dependencies
Some dependency sources were downloaded via http, even though https (SSL/TLS) options are available. Even if we potentially check the integrity of the downloaded files via hash comparison, we should make use of this additional security layer. bdb.mk fontconfig.mk freetype.mk libX11.mk libXau.mk libXext.mk libxcb.mk native_cctools.mk native_cdrkit.mk xcb_proto.mk xextproto.mk xproto.mk xtrans.mk zlib.mk miniupnp was switched to official project mirror with SSL support
Diffstat (limited to 'depends/packages.md')
-rw-r--r--depends/packages.md5
1 files changed, 3 insertions, 2 deletions
diff --git a/depends/packages.md b/depends/packages.md
index 7c80362509..7d2bd4670d 100644
--- a/depends/packages.md
+++ b/depends/packages.md
@@ -14,8 +14,9 @@ Each package is required to define at least these variables:
placeholder such as 1.0 can be used.
$(package)_download_path:
- Location of the upstream source, without the file-name. Usually http or
- ftp.
+ Location of the upstream source, without the file-name. Usually http, https
+ or ftp. Secure transmission options like https should be preferred if
+ available.
$(package)_file_name:
The upstream source filename available at the download path.