From f8c0c27566f90423b21c545fa296f3780f51426f Mon Sep 17 00:00:00 2001 From: Jack Nagel Date: Sat, 18 Oct 2014 17:39:53 -0500 Subject: [PATCH] Deprecate insecure download strategies --- Library/Homebrew/cmd/audit.rb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/Library/Homebrew/cmd/audit.rb b/Library/Homebrew/cmd/audit.rb index 4b9aba93c4..4ac5bb4f19 100644 --- a/Library/Homebrew/cmd/audit.rb +++ b/Library/Homebrew/cmd/audit.rb @@ -630,6 +630,12 @@ class ResourceAuditor def audit_download_strategy return unless using + if using == :ssl3 || using == CurlSSL3DownloadStrategy + problem "The SSL3 download strategy is deprecated, please choose a different URL" + elsif using == CurlUnsafeDownloadStrategy + problem "#{using.name} is deprecated, please choose a different URL" + end + url_strategy = DownloadStrategyDetector.detect(url) using_strategy = DownloadStrategyDetector.detect('', using)