diff options
| author | Joey Hess <joey@kitenet.net> | 2013-12-27 01:53:49 (GMT) |
|---|---|---|
| committer | Joey Hess <joey@kitenet.net> | 2013-12-27 01:56:27 (GMT) |
| commit | e6380aad7870678bd23a9f4e23beb73c2b20d79c (patch) | |
| tree | d669db1381fc2c702880d53283fdf398d6cff8fa /debian | |
| parent | 299a5cc6a647fa2a176b12a5314fc8bbb7be1d1b (diff) | |
| download | debootstrap-e6380aad7870678bd23a9f4e23beb73c2b20d79c.zip debootstrap-e6380aad7870678bd23a9f4e23beb73c2b20d79c.tar.gz debootstrap-e6380aad7870678bd23a9f4e23beb73c2b20d79c.tar.bz2 | |
default to https mirror for Debian when no gpg verification is available
When deboostrapping Debian, and the debian-archive-keyring is not
available, switch the default mirror to a https url. This way at least the
CA level of security is available even for users who have no way to check
gpg keys in the WoT. The https mirror is currently
https://mirrors.kernel.org/debian.
When the keyring is available, the default mirror remains non-https,
for several reasons:
a) to avoid overloading mirrors.kernel.org
b) because http.us.debian.org lacks https support
c) because mirrors.kernel.org is not currently in the
http.us.debian.org rotation
d) because mirrors.kernel.org lacks IPv6 support
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index e9a72f9..83a9634 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,10 +1,18 @@ debootstrap (1.0.56) UNRELEASED; urgency=low + [ Tollef Fog Heen ] * Install base-passwd and base-files in two calls rather than one to avoid problems with home-built media with different ordering in Packages. Thanks to Jo Shields for pointing this out and providing the workaround. Closes: #601670. LP: #1001131. + [ Joey Hess ] + * When deboostrapping Debian, and the debian-archive-keyring is not + available, switch the default mirror to a https url. This way at + least the CA level of security is available even for users who + have no way to check gpg keys in the WoT. The https mirror is + currently https://mirrors.kernel.org/debian. + -- Tollef Fog Heen <tfheen@debian.org> Thu, 19 Dec 2013 13:41:37 +0100 debootstrap (1.0.55) unstable; urgency=low |