diff gnulib-tool @ 39897:ac60f423d63b

bootstrap, gnulib-tool: use https instead of insecure rsync The rsync command does not do any authentication and thus allows man-in-the-middle attacks. Better use wget over https, although this is slower. * build-aux/bootstrap (download_po_files, po_download_command_format): Don't try using rsync; always use wget over https to fetch PO files. * gnulib-tool (func_import): Likewise. * pygnulib/GLImport.py (GLImport.execute): Likewise.
author Benno Schulenberg <bensberg@telfort.nl>
date Sun, 07 Oct 2018 18:20:44 +0200
parents e04cf5381eec
children 647230feebc0
line wrap: on
line diff
--- a/gnulib-tool	Sun Oct 07 19:19:30 2018 +0200
+++ b/gnulib-tool	Sun Oct 07 18:20:44 2018 +0200
@@ -5431,18 +5431,10 @@
     fi
     # Fetch PO files.
     TP_URL="https://translationproject.org/latest/"
-    TP_RSYNC_URI="translationproject.org::tp/latest/"
     if $doit; then
       echo "Fetching gnulib PO files from $TP_URL"
       (cd "$destdir"/$pobase \
-       && { # Prefer rsync over wget if it is available, since it consumes
-            # less network bandwidth, due to compression.
-            if type rsync 2>/dev/null | grep / > /dev/null; then
-              rsync --delete --include "*.po" --exclude "*" -Lrtz "${TP_RSYNC_URI}gnulib/" . && return
-            fi
-
-            wget --no-verbose --mirror --level=1 -nd -A.po -P . "${TP_URL}gnulib/"
-          }
+       && wget --no-verbose --mirror --level=1 -nd -A.po -P . "${TP_URL}gnulib/"
       )
     else
       echo "Fetch gnulib PO files from $TP_URL"