Branch: refs/heads/master Home: https://github.com/openSUSE/obs-build Commit: 9547a404e8a2fdcb9ddcd75b371e200d1884118f https://github.com/openSUSE/obs-build/commit/9547a404e8a2fdcb9ddcd75b371e200... Author: Mihai Moldovan <ionic@ionic.de> Date: 2017-11-17 (Fri, 17 Nov 2017) Changed paths: M download Log Message: ----------- download: don't use deprecated Crypt::SSLeay. LWP::Protocol::https nowadays uses IO::Socket::SSL, which is a more complete implementation and allows hostname verification. Using Crypt::SSLeay actually causes a serious bug on non-ancient systems: downloads over HTTPS will be slowed down by factors of up to 120(!), while downloads with IO::Socket::SSL are reasonably fast (minus the more or less slight overhead incurred by using TLS). Commit: fd704b8f37d9c7a24a12f58ec161e78be05f0493 https://github.com/openSUSE/obs-build/commit/fd704b8f37d9c7a24a12f58ec161e78... Author: Mihai Moldovan <ionic@ionic.de> Date: 2017-11-17 (Fri, 17 Nov 2017) Changed paths: M download Log Message: ----------- download: enable hostname verfication for HTTPS URLs. Switching to the default implementation (normally IO::Socket::Ssl) allows us to finally enable hostname verifcation as well. Note that "hostname verification" in this context means that LWP will check whether the certifcate provided by the server matches its hostname. Even without hostname verifcation, the certificate itself is still checked for validity against the system trust anchor. Disabling hostname verification only makes sense in broken site configurations and even then it's not really a good idea. Commit: d31f1194a0263efdd8f42281e2e9e8bdb5f6d321 https://github.com/openSUSE/obs-build/commit/d31f1194a0263efdd8f42281e2e9e8b... Author: Mihai Moldovan <ionic@ionic.de> Date: 2017-11-17 (Fri, 17 Nov 2017) Changed paths: M download Log Message: ----------- download: enable proxy support for HTTPS. Non-ancient versions (anything past 2013) should be able to handle proxying HTTPS connections with IO::Socket::Ssl just fine. Commit: 92bb84fd06f6aa036d9389e07b360111f084a534 https://github.com/openSUSE/obs-build/commit/92bb84fd06f6aa036d9389e07b36011... Author: Adrian Schröter <adrian@suse.de> Date: 2017-11-22 (Wed, 22 Nov 2017) Changed paths: M download Log Message: ----------- Merge pull request #403 from Ionic/bugfix/improve-download Modernize download script. Compare: https://github.com/openSUSE/obs-build/compare/4d2ec64928e1...92bb84fd06f6