On Thu, Mar 23, 2023 at 08:50:25AM -0500, Nishanth Menon via 
lists.yoctoproject.org wrote:
> We did this in meta-ti and meta-arago but didn't propagate back into
> oe-layersetup yet so I'll give it a go. git:// is no longer functional
> proxies over on latest git versions (example: poky crops container for
> ubuntu 22.04[1]), also git:// is highly susceptible to man-in-the-middle
> attacks[2]. Dump git:// in favor of https.

Looks good to me, thanks.


> [1] https://hub.docker.com/r/crops/poky/tags 22.04
> [2] https://github.blog/2021-09-01-improving-git-protocol-security-github/
> 
> Signed-off-by: Nishanth Menon <[email protected]>

Reviewed-by: Denys Dmytriyenko <[email protected]>


> ---
> New patch in the series.
> 
>  sample-files/gitconfig.sample | 9 ++++++---
>  1 file changed, 6 insertions(+), 3 deletions(-)
> 
> diff --git a/sample-files/gitconfig.sample b/sample-files/gitconfig.sample
> index 2d06bdcd80b9..14533650a781 100644
> --- a/sample-files/gitconfig.sample
> +++ b/sample-files/gitconfig.sample
> @@ -3,14 +3,17 @@
>  # See https://git-scm.com/docs/git-config for further information
>  # To debug, use GIT_CURL_VERBOSE=1 GIT_TRACE=1
>  
> -[url "git://git.yoctoproject.org/meta-arago"]
> +[url "https://git.yoctoproject.org/meta-arago";]
>       insteadOf = git://arago-project.org/git/meta-arago
>       insteadOf = http://arago-project.org/git/meta-arago
> +     insteadOf = git://git.yoctoproject.org/meta-arago
>  
> -[url "git://git.yoctoproject.org/meta-ti"]
> +[url "https://git.yoctoproject.org/meta-ti";]
>       insteadOf = git://arago-project.org/git/meta-ti
>       insteadOf = http://arago-project.org/git/meta-ti
> +     insteadOf = git://git.yoctoproject.org/meta-ti
>  
> -[url "git://git.ti.com/arago-project/oe-layersetup"]
> +[url "https://git.ti.com/arago-project/oe-layersetup";]
>       insteadOf = git://arago-project.org/git/projects/oe-layersetup
>       insteadOf = http://arago-project.org/git/projects/oe-layersetup
> +     insteadOf = git://git.ti.com/arago-project/oe-layersetup
> -- 
> 2.40.0


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#14279): 
https://lists.yoctoproject.org/g/meta-arago/message/14279
Mute This Topic: https://lists.yoctoproject.org/mt/97800958/21656
Group Owner: [email protected]
Unsubscribe: 
https://lists.yoctoproject.org/g/meta-arago/leave/10763299/21656/89520264/xyzzy 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to