Subject: bug#60230: closed (Re: bug#60230: [GNU ELPA] Prefer https:// URLs to unencrypted git:// for upstream URLs)

From: [email-masked] (GNU bug Tracking System)
Date: Wed, 21 Dec 2022 07:36:02 +0000

Your bug report

#60230: [GNU ELPA] Prefer https:// URLs to unencrypted git:// for upstream URLs

which was filed against the emacs package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
60230: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=60230
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#60230: [GNU ELPA] Prefer https:// URLs to unencrypted git:// for upstream URLs
From: Stefan Kangas <[email-masked]>
To: Stefan Monnier <[email-masked]>
Cc: [email-masked]
Date: Wed, 21 Dec 2022 01:35:01 -0600
List-Id: <debbugs-submit.debbugs.gnu.org>

Stefan Monnier <[email-masked]> writes:

> Yes, please.

Great, thanks!  Now pushed.

Subject: [GNU ELPA] Prefer https:// URLs to unencrypted git:// for upstream URLs
From: Stefan Kangas <[email-masked]>
To: [email-masked]
Date: Tue, 20 Dec 2022 19:36:27 -0600
List-Id: <debbugs-submit.debbugs.gnu.org>

Tags: patch

The attached changes the URLs of several GNU ELPA upstreams to use
https:// instead of unencrypted git://.  This is a good idea for all the
usual reasons (security, privacy, etc.).  I have verified the new URLs
manually using "git clone <URL>".

I'm not sure if this would need any manual changes to take effect on the
elpa.gnu.org machine.
From 8828030042ce05e369f93a805211a927c77bcda7 Mon Sep 17 00:00:00 2001
From: Stefan Kangas <[email-masked]>
Date: Wed, 21 Dec 2022 01:56:26 +0100
Subject: [PATCH] Prefer https:// to git:// URLs

* elpa-packages (auctex, bbdb, org, poke, poke-mode, tramp)
(vcl-mode): Prefer https:// to git:// URLs.
---
 elpa-packages | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/elpa-packages b/elpa-packages
index 72ab1d3098..0817cf4271 100644
--- a/elpa-packages
+++ b/elpa-packages
@@ -74,7 +74,7 @@
  (async			:url "https://github.com/jwiegley/emacs-async"
   :ignored-files ("COPYING")
   :auto-sync t)
- (auctex		:url "git://git.sv.gnu.org/auctex.git"
+ (auctex		:url "https://git.savannah.gnu.org/git/auctex.git"
   ;; AUCTeX is currently sync'd manually and elpa.git isn't quite a mirror :-(
   :auto-sync nil)
  (aumix-mode		:url nil)
@@ -83,7 +83,7 @@
   :doc "docs/auto-overlay-manual.texinfo")
  ;; FIXME: Avy diverged https://github.com/abo-abo/avy/issues/344
  (avy			:url "https://github.com/abo-abo/avy")
- (bbdb			:url "git://git.savannah.nongnu.org/bbdb.git"
+ (bbdb			:url "https://git.savannah.nongnu.org/git/bbdb.git"
   :lisp-dir "lisp"
   :doc "doc/bbdb.texi"
   ;; The BBDB branch in elpa.git is managed directly by hand, with
@@ -520,7 +520,7 @@
   :doc "orderless.texi"
   :readme "README.org"
   :auto-sync t)
- (org			:url "git://git.sv.gnu.org/emacs/org-mode.git"
+ (org			:url "https://git.savannah.gnu.org/git/emacs/org-mode.git"
   :lisp-dir "lisp"
   :release-branch "bugfix"
   :ignored-files ("etc/schema" "contrib" "mk" "testing" "lisp/org-install.el")
@@ -589,11 +589,11 @@
   :ignored-files ("LICENSE")
   :doc "README.org"
   :auto-sync t)
- (poke			:url "git://git.sv.gnu.org/poke/poke-el.git"
+ (poke			:url "https://git.savannah.gnu.org/git/poke/poke-el.git"
   :doc "poke-el.texi"
   :ignored-files ("COPYING")
   :auto-sync t)
- (poke-mode		:url "git://git.sv.gnu.org/poke/poke-mode.git"
+ (poke-mode		:url "https://git.savannah.gnu.org/git/poke/poke-mode.git"
   :auto-sync t)
  (poker			:url nil)
  (polymode		:url "https://github.com/polymode/polymode"
@@ -743,7 +743,7 @@
   :ignored-files ("LICENSE")
   :news "NEWS.md"
   :auto-sync t)
- (tramp			:url "git://git.sv.gnu.org/tramp.git"
+ (tramp			:url "https://git.savannah.gnu.org/git/tramp.git"
   :branch "externals/tramp"
   :main-file "trampver.el"
   :make ("autoloads" "info")
@@ -799,7 +799,7 @@
  (vc-hgcmd		:url "https://github.com/muffinmad/emacs-vc-hgcmd"
   :auto-sync t)
  (vcard			:url nil)
- (vcl-mode	        :url "git://git.gnu.org.ua/vcl-mode")
+ (vcl-mode	        :url "https://git.gnu.org.ua/vcl-mode.git")
  (vdiff               	:url "https://github.com/justbur/emacs-vdiff"
   :auto-sync t)
  (verilog-mode		:core "lisp/progmodes/verilog-mode.el")
-- 
2.35.1