Re: pkg/45680: pkglint should know FETCH_USING=

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

The following reply was made to PR pkg/45680; it has been noted by GNATS.

From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/45680: pkglint should know FETCH_USING=
Date: Sun, 4 Dec 2011 01:17:31 +0100

 On Sun, Dec 04, 2011 at 12:05:03AM +0000, Aleksey Cheusov wrote:
 > The following reply was made to PR pkg/45680; it has been noted by GNATS.
 > 
 > From: Aleksey Cheusov <cheusov%tut.by@localhost>
 > To: gnats-bugs%NetBSD.org@localhost
 > Cc: 
 > Subject: Re: pkg/45680: pkglint should know FETCH_USING=
 > Date: Sun, 04 Dec 2011 03:04:07 +0300
 > 
 >  > pkglint complains about FETCH_USING being defined but not used which
 >  > is incorrect.
 >  
 >  FETCH_USING should not be used in Makefiles because it is user's
 >  variable and normally set in mk.conf. If user sets FETCH_USING in
 >  mk.conf (I do!), this value will override package's "curl", for example,
 >  used for fetching distfiles over https. I don't think "So don't use
 >  https-only services. Problem solved." is a real solution, however. We
 >  really need a better one.
 
 There is no reason why the few distfiles can't be (additionally) be
 mirrored locally. The other issue of course is politcally, there is
 little reason to force https for downloads, especially if there are
 mechanisms in place to ensure that authenticity of the files.
 
 Joerg