summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSteven Chamberlain <steven@pyro.eu.org>2015-07-31 19:44:59 +0100
committerPaul Kocialkowski <contact@paulk.fr>2015-08-25 18:01:31 +0200
commite3cca288ad5851b4f4860c0bdecd746a4b94c1f8 (patch)
treed56f2e07dad2fe5ec276f76f44042e9b50845417
parent5e4e0a171cc2e2d90be13c6f019d47fa7f616438 (diff)
downloadvendor_replicant-e3cca288ad5851b4f4860c0bdecd746a4b94c1f8.zip
vendor_replicant-e3cca288ad5851b4f4860c0bdecd746a4b94c1f8.tar.gz
vendor_replicant-e3cca288ad5851b4f4860c0bdecd746a4b94c1f8.tar.bz2
Require https for f-droid.org prebuilt downloads
When fetching prebuilt binaries from f-droid.org, we were using http, but are now redirected to a https URI - unless a MITM attacker gets there first... Change to unconditionally use https to fetch prebuilt binaries. While here, set -e so that failure to download any file is not ignored.
-rwxr-xr-xget-prebuilts5
1 files changed, 3 insertions, 2 deletions
diff --git a/get-prebuilts b/get-prebuilts
index d18730b..df87fa6 100755
--- a/get-prebuilts
+++ b/get-prebuilts
@@ -1,12 +1,13 @@
#!/bin/sh
+set -e
BASEDIR=$( dirname $0 )
mkdir -p $BASEDIR/prebuilt/common/apps/
# F-Droid
-curl -L -o $BASEDIR/prebuilt/common/apps/FDroid.apk -O -L http://f-droid.org/FDroid.apk
+curl -L -o $BASEDIR/prebuilt/common/apps/FDroid.apk -O -L https://f-droid.org/FDroid.apk
# Terminal Emulator
-curl -L -o $BASEDIR/prebuilt/common/apps/TerminalEmulator.apk -O -L http://f-droid.org/repo/jackpal.androidterm_71.apk
+curl -L -o $BASEDIR/prebuilt/common/apps/TerminalEmulator.apk -O -L https://f-droid.org/repo/jackpal.androidterm_71.apk
unzip -o -d $BASEDIR/prebuilt/common/apps/ $BASEDIR/prebuilt/common/apps/TerminalEmulator.apk lib/armeabi/libjackpal-termexec2.so lib/armeabi/libjackpal-androidterm5.so