toolchain: switch linaro to https urls

From: Jason Abele <jason@nextthing.co>

Signed-off-by: Jason Abele <jason@nextthing.co>
---
It looks like releases.linaro.org is no longer available without ssl.
If this change is permanent, we should probably fix the urls.

 toolchain/toolchain-external/toolchain-external.mk | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

Jason, All,

On 2016-03-09 11:40 -0800, Jason Abele spake thusly:
> From: Jason Abele <jason@nextthing.co>
> 
> Signed-off-by: Jason Abele <jason@nextthing.co>

Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr>

> ---
> It looks like releases.linaro.org is no longer available without ssl.
> If this change is permanent, we should probably fix the urls.

Even if the http URLs return to operational in the future, we want
to keep the https ones anyway.

Thanks!

Regards,
Yann E. MORIN.

> 
>  toolchain/toolchain-external/toolchain-external.mk | 12 ++++++------
>  1 file changed, 6 insertions(+), 6 deletions(-)
> 
> diff --git a/toolchain/toolchain-external/toolchain-external.mk b/toolchain/toolchain-external/toolchain-external.mk
> index e712998..37e1a2e 100644
> --- a/toolchain/toolchain-external/toolchain-external.mk
> +++ b/toolchain/toolchain-external/toolchain-external.mk
> @@ -295,22 +295,22 @@ endef
>  TOOLCHAIN_EXTERNAL_POST_EXTRACT_HOOKS += TOOLCHAIN_EXTERNAL_FIXUP_CMDS
>  else ifeq ($(BR2_TOOLCHAIN_EXTERNAL_LINARO_ARM),y)
>  ifeq ($(HOSTARCH),x86)
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/14.09/components/toolchain/binaries
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/14.09/components/toolchain/binaries
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-arm-linux-gnueabihf-4.9-2014.09_linux.tar.xz
>  TOOLCHAIN_EXTERNAL_ACTUAL_SOURCE_TARBALL = gcc-linaro-arm-linux-gnueabihf-4.9-2014.09_src.tar.bz2
>  TOOLCHAIN_EXTERNAL_POST_INSTALL_STAGING_HOOKS += TOOLCHAIN_EXTERNAL_LINARO_ARMHF_SYMLINK
>  else
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/arm-linux-gnueabihf
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/arm-linux-gnueabihf
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-5.2-2015.11-2-x86_64_arm-linux-gnueabihf.tar.xz
>  endif
>  else ifeq ($(BR2_TOOLCHAIN_EXTERNAL_LINARO_ARMEB),y)
>  ifeq ($(HOSTARCH),x86)
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/14.09/components/toolchain/binaries
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/14.09/components/toolchain/binaries
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-armeb-linux-gnueabihf-4.9-2014.09_linux.tar.xz
>  TOOLCHAIN_EXTERNAL_ACTUAL_SOURCE_TARBALL = gcc-linaro-armeb-linux-gnueabihf-4.9-2014.09_src.tar.bz2
>  TOOLCHAIN_EXTERNAL_POST_INSTALL_STAGING_HOOKS += TOOLCHAIN_EXTERNAL_LINARO_ARMEBHF_SYMLINK
>  else
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/armeb-linux-gnueabihf
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/armeb-linux-gnueabihf
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-5.2-2015.11-2-x86_64_armeb-linux-gnueabihf.tar.xz
>  endif
>  else ifeq ($(BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_MIPS),y)
> @@ -350,12 +350,12 @@ TOOLCHAIN_EXTERNAL_STRIP_COMPONENTS = 3
>  TOOLCHAIN_EXTERNAL_POST_EXTRACT_HOOKS += TOOLCHAIN_EXTERNAL_BLACKFIN_UCLIBC_EXTRA_EXTRACT
>  else ifeq ($(BR2_TOOLCHAIN_EXTERNAL_LINARO_AARCH64),y)
>  ifeq ($(HOSTARCH),x86)
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/14.09/components/toolchain/binaries
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/14.09/components/toolchain/binaries
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-aarch64-linux-gnu-4.9-2014.09_linux.tar.xz
>  TOOLCHAIN_EXTERNAL_ACTUAL_SOURCE_TARBALL = gcc-linaro-aarch64-linux-gnu-4.9-2014.09_src.tar.bz2
>  TOOLCHAIN_EXTERNAL_POST_INSTALL_STAGING_HOOKS += TOOLCHAIN_EXTERNAL_LINARO_AARCH64_SYMLINK
>  else
> -TOOLCHAIN_EXTERNAL_SITE = http://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/aarch64-linux-gnu
> +TOOLCHAIN_EXTERNAL_SITE = https://releases.linaro.org/components/toolchain/binaries/5.2-2015.11-2/aarch64-linux-gnu
>  TOOLCHAIN_EXTERNAL_SOURCE = gcc-linaro-5.2-2015.11-2-x86_64_aarch64-linux-gnu.tar.xz
>  endif
>  else ifeq ($(BR2_TOOLCHAIN_EXTERNAL_CODESOURCERY_AARCH64),y)
> -- 
> 2.1.4
> 
> _______________________________________________
> buildroot mailing list
> buildroot@busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot

>>>>> "Yann" == Yann E MORIN <yann.morin.1998@free.fr> writes:

 > Jason, All,
 > On 2016-03-09 11:40 -0800, Jason Abele spake thusly:
 >> From: Jason Abele <jason@nextthing.co>
 >> 
 >> Signed-off-by: Jason Abele <jason@nextthing.co>

 > Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr>

 >> ---
 >> It looks like releases.linaro.org is no longer available without ssl.
 >> If this change is permanent, we should probably fix the urls.

 > Even if the http URLs return to operational in the future, we want
 > to keep the https ones anyway.

Do we? With the package hashes, https doesn't really buy anything, and
we sometimes have issues with certificates and (old versions) wget.

Peter, All,

On 2016-03-09 22:51 +0100, Peter Korsgaard spake thusly:
> >>>>> "Yann" == Yann E MORIN <yann.morin.1998@free.fr> writes:
> 
>  > Jason, All,
>  > On 2016-03-09 11:40 -0800, Jason Abele spake thusly:
>  >> From: Jason Abele <jason@nextthing.co>
>  >> 
>  >> Signed-off-by: Jason Abele <jason@nextthing.co>
> 
>  > Acked-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
> 
>  >> ---
>  >> It looks like releases.linaro.org is no longer available without ssl.
>  >> If this change is permanent, we should probably fix the urls.
> 
>  > Even if the http URLs return to operational in the future, we want
>  > to keep the https ones anyway.
> 
> Do we? With the package hashes, https doesn't really buy anything, and
> we sometimes have issues with certificates and (old versions) wget.

Well, except for oldish wget and new certs, https i sbetter, not because
it provides authentication of the downloads (which is what our hashes
are for), but because it also /conceals/ the actual download from prying
eyes.

BTW, we have 131 packages on https, plus the 292 Github-hosted packages
also on https. ;-)

So yes, https is better than http. Always.

Regards,
Yann E. MORIN.

>>>>> "Jason" == Jason Abele <jason.abele@gmail.com> writes:

 > From: Jason Abele <jason@nextthing.co>
 > Signed-off-by: Jason Abele <jason@nextthing.co>
 > ---
 > It looks like releases.linaro.org is no longer available without ssl.
 > If this change is permanent, we should probably fix the urls.

Committed, thanks.