FreeBSD needs Git to ensure repo integrity [was: 2012 incident]
Gary Palmer
gpalmer at freebsd.org
Tue Nov 20 16:31:06 UTC 2012
On Tue, Nov 20, 2012 at 11:26:42AM -0500, Eitan Adler wrote:
> On 20 November 2012 04:54, xenophon\+freebsd
> <xenophon+freebsd at irtnog.org> wrote:
> >> As of now:
> >>
> >> - SVN is *the* source of truth.
> >
> > Would it be possible to publish FreeBSD's Subversion repository using
> > HTTPS, instead of HTTP?
>
> %svn ls https://svn0.us-west.FreeBSD.org/base/
You will get a certificate warning. The certificates used do not
appear to be officially signed by a recognised CA. The hashes of the
certificate keys are on the mirror website I pointed out in my email
Regards,
Gary
More information about the freebsd-security
mailing list