audit: banish http://http.debian.net for secure mirrors

This commit is contained in:
Dominyk Tiller 2016-08-30 04:47:26 +01:00
parent 4422bd1f34
commit 8a3a4b83fd
No known key found for this signature in database
GPG Key ID: FE19AEFCF658C6F6

View File

@ -1253,6 +1253,17 @@ class ResourceAuditor
end end
end end
# Debian has an abundance of secure mirrors. Let's not pluck the insecure
# one out of the grab bag.
urls.each do |u|
next unless u =~ %r{^http://http\.debian\.net/debian/(.*)}i
problem <<-EOS.undent
Please use a secure mirror for Debian URLs.
We recommend:
https://mirrors.ocf.berkeley.edu/debian/#{$1}
EOS
end
# Check for Google Code download urls, https:// is preferred # Check for Google Code download urls, https:// is preferred
# Intentionally not extending this to SVN repositories due to certificate # Intentionally not extending this to SVN repositories due to certificate
# issues. # issues.