Mercurial > gnulib
diff gnulib-tool @ 39897:ac60f423d63b
bootstrap, gnulib-tool: use https instead of insecure rsync
The rsync command does not do any authentication and thus allows
man-in-the-middle attacks. Better use wget over https, although
this is slower.
* build-aux/bootstrap (download_po_files, po_download_command_format):
Don't try using rsync; always use wget over https to fetch PO files.
* gnulib-tool (func_import): Likewise.
* pygnulib/GLImport.py (GLImport.execute): Likewise.
| author | Benno Schulenberg <bensberg@telfort.nl> |
|---|---|
| date | Sun, 07 Oct 2018 18:20:44 +0200 |
| parents | e04cf5381eec |
| children | 647230feebc0 |
line wrap: on
line diff
--- a/gnulib-tool Sun Oct 07 19:19:30 2018 +0200 +++ b/gnulib-tool Sun Oct 07 18:20:44 2018 +0200 @@ -5431,18 +5431,10 @@ fi # Fetch PO files. TP_URL="https://translationproject.org/latest/" - TP_RSYNC_URI="translationproject.org::tp/latest/" if $doit; then echo "Fetching gnulib PO files from $TP_URL" (cd "$destdir"/$pobase \ - && { # Prefer rsync over wget if it is available, since it consumes - # less network bandwidth, due to compression. - if type rsync 2>/dev/null | grep / > /dev/null; then - rsync --delete --include "*.po" --exclude "*" -Lrtz "${TP_RSYNC_URI}gnulib/" . && return - fi - - wget --no-verbose --mirror --level=1 -nd -A.po -P . "${TP_URL}gnulib/" - } + && wget --no-verbose --mirror --level=1 -nd -A.po -P . "${TP_URL}gnulib/" ) else echo "Fetch gnulib PO files from $TP_URL"