https://bugs.kde.org/show_bug.cgi?id=398858
Bug ID: 398858
Summary: kdesrc-build should use HTTPS instead of SSH for
anonymous git clones
Product: kdesrc-build
Version: Git
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: mp...@kde.org
Reporter: jm.ouwerk...@gmail.com
Target Milestone: ---
Created attachment 115113
--> https://bugs.kde.org/attachment.cgi?id=115113&action=edit
Patch to use HTTPS instead of SSH (git format-patch)
I think kdesrc-build should use HTTPS instead of SSH for the anonymous git
clones for a number of reasons:
- It is more likely to work when behind a firewall/proxy.
- We hint at this issue and recommend HTTPS over SSH for that particular case
in our wiki guideline/howto as well:
https://community.kde.org/Guidelines_and_HOWTOs/Build_from_source#Git_remote_prefix
- Installing git does not automatically imply installing an ssh client, that
is: if you set up a minimal distro with git + subversion + bzr you'll find
kdesrc-build won't work out of the box.
- kdesrc-build must trust the kde git server unconditionally; with HTTPS you
still get some certificate validation
- Related to that: if I understand kdesrc-build correctly here, this would
also imply that SSH would break if anongit.kde.org was moved to a different
server with a different SSH key. With HTTPS/certificates this is not an issue.
A patch is attached to move kdesrc-build to HTTPS (git format-patch).
--
You are receiving this mail because:
You are watching all bug changes.
