Page MenuHomePhabricator

depends: switch to secure download of all dependencies
ClosedPublic

Authored by Fabien on Mar 19 2020, 14:46.

Details

Summary
Some dependency sources were downloaded via http, even though https
(SSL/TLS) options are available.
Even if we potentially check the integrity of the downloaded files via
hash comparison, we should make use of this additional security layer.

Backport of core PR16049.

Depends on D5504.

Test Plan

Run the Gitian build twice, check the result is deterministic.

Diff Detail

Repository
rABC Bitcoin ABC
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

[Bot Message]
One or more PR numbers were detected in the summary.
Links to those PRs have been inserted into the summary for reference.

This revision is now accepted and ready to land.Mar 19 2020, 14:49