Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

8231870: CrossLibs script for armv6hf toolchain download fails #8

Closed
Changes from all commits
Commits
File filter...
Filter file types
Jump to…
Jump to file
Failed to load files.

Always

Just for now

@@ -228,7 +228,7 @@ installLibs() {

getPackages \
$DESTINATION \
http://ftp.us.debian.org/debian/ wheezy main armhf \
http://archive.debian.org/debian/ wheezy main armhf \

This comment has been minimized.

Copy link
@kevinrushforth

kevinrushforth Oct 7, 2019

Member

The use of http:// URLs to download artifacts is strongly discouraged, since it isn't secure. Is there a valid https:// URL that can be used instead? I note that just substituting http with https in the above URL does not work.

This comment has been minimized.

Copy link
@octylFractal

octylFractal Oct 7, 2019

In general a lot of Debian package URLs are not HTTPS by default because of apt's built-in signature checking, https://whydoesaptnotusehttps.com/. However, it does seem like it should at least be supported, so it might be a bug in the debian.org server config.

Additionally, I see that the getPackages command doesn't check these signatures. It probably should, but that's another PR.

libatk1.0-dev \
libatk1.0-0 \
libc6 \
@@ -389,7 +389,7 @@ installLibs() {
# get some rapberry Pi specials
getPackages \
$DESTINATION \
http://archive.raspbian.org/raspbian wheezy firmware armhf \
http://legacy.raspbian.org/raspbian wheezy firmware armhf \

This comment has been minimized.

Copy link
@kevinrushforth

kevinrushforth Oct 7, 2019

Member

Same comment hear about using an https URL if possible.

libraspberrypi-dev
}

ProTip! Use n and p to navigate between commits in a pull request.
You can’t perform that action at this time.