[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: pkg/45680: pkglint should know FETCH_USING=
The following reply was made to PR pkg/45680; it has been noted by GNATS.
From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
Subject: Re: pkg/45680: pkglint should know FETCH_USING=
Date: Sun, 4 Dec 2011 01:17:31 +0100
On Sun, Dec 04, 2011 at 12:05:03AM +0000, Aleksey Cheusov wrote:
> The following reply was made to PR pkg/45680; it has been noted by GNATS.
> From: Aleksey Cheusov <cheusov%tut.by@localhost>
> To: gnats-bugs%NetBSD.org@localhost
> Subject: Re: pkg/45680: pkglint should know FETCH_USING=
> Date: Sun, 04 Dec 2011 03:04:07 +0300
> > pkglint complains about FETCH_USING being defined but not used which
> > is incorrect.
> FETCH_USING should not be used in Makefiles because it is user's
> variable and normally set in mk.conf. If user sets FETCH_USING in
> mk.conf (I do!), this value will override package's "curl", for example,
> used for fetching distfiles over https. I don't think "So don't use
> https-only services. Problem solved." is a real solution, however. We
> really need a better one.
There is no reason why the few distfiles can't be (additionally) be
mirrored locally. The other issue of course is politcally, there is
little reason to force https for downloads, especially if there are
mechanisms in place to ensure that authenticity of the files.
Main Index |
Thread Index |