[RP-PPPoE] Buildroot (was Re: missing https://...)

[Jaco Kroon]

Hi Dianne,

Whilst I agree, some people use this as a work-around for a poorly 
configured chroot where the root CA's doesn't work.

Fortunately usually they check for the downloaded file matching some 
known-in-advance-in-the-script checksum (Gentoo uses sha256 mostly 
nowadays).  But I don't see the script, just the log there.

Anyway, for the buildroot, downloads.uls.co.za uses letsencrypt, so 
please don't use --no-check-certificate unless you have good reason.

Kind regards,
Jaco

On 2024/09/09 15:21, Dianne Skoll via RP-PPPoE wrote:

> Hi again,
>
> I just noticed this in the buildroot logs [1]:
>
>    wget -nd -t 3 --no-check-certificate -O ...
>
> That --no-check-certificate seems like a bad idea, unless the recipe also
> fetches and checks the .sig file.  Why would buildroot disable certificate
> checks?
>
> Regards,
>
> Dianne.
>
>
> [1] http://autobuild.buildroot.org/results/867/8676456feec9dd401152887101ad1a9ce96cb769/build-end.log
> _______________________________________________
> RP-PPPoE mailing list
> RP-PPPoE at lists.skoll.ca
> https://dianne.skoll.ca/mailman/listinfo/rp-pppoe