FreeBSD needs Git to ensure repo integrity [was: 2012 incident]

Gary Palmer gpalmer at freebsd.org
Tue Nov 20 16:31:06 UTC 2012


On Tue, Nov 20, 2012 at 11:26:42AM -0500, Eitan Adler wrote:
> On 20 November 2012 04:54, xenophon\+freebsd
> <xenophon+freebsd at irtnog.org> wrote:
> >> As of now:
> >>
> >> - SVN is *the* source of truth.
> >
> > Would it be possible to publish FreeBSD's Subversion repository using
> > HTTPS, instead of HTTP?
> 
> %svn ls https://svn0.us-west.FreeBSD.org/base/

You will get a certificate warning.  The certificates used do not
appear to be officially signed by a recognised CA.  The hashes of the 
certificate keys are on the mirror website I pointed out in my email

Regards,

Gary


More information about the freebsd-security mailing list