PR/58891 CVS commit: pkgsrc/mk/fetch

["Maya Rashish" <maya%netbsd.org@localhost>]

The following reply was made to PR pkg/58891; it has been noted by GNATS.

From: "Maya Rashish" <maya%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/58891 CVS commit: pkgsrc/mk/fetch
Date: Thu, 26 Dec 2024 20:23:07 +0000

 Module Name:	pkgsrc
 Committed By:	maya
 Date:		Thu Dec 26 20:23:07 UTC 2024
 
 Modified Files:
 	pkgsrc/mk/fetch: fetch.mk
 
 Log Message:
 Validate TLS when fetching.
 
 This is not a security issue for users of pkgsrc as any downloaded files
 are checked against a checksum, but it is for developers are updating a
 package and generating the checksum for the first time.
 
 We know this is a safe change to make as some bulk builds are already
 running with TLS verification (e.g. the default fetch method on NetBSD 10
 validates TLS, and there aren't issues shown by bulk builds).
 
 If an upstream has TLS errors, we can work around it using
 `make upload-distfiles`, which will upload it to our local distfile mirror,
 and is a default fallback.
 
 PR pkg/58891
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.79 -r1.80 pkgsrc/mk/fetch/fetch.mk
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.