FS#46101 - pacman: DANE support

Attached to Project: Pacman
Opened by MIkaela Suomalainen (Mikaela) - Tuesday, 25 August 2015, 12:37 GMT
Last edited by Allan McRae (Allan) - Tuesday, 25 August 2015, 23:03 GMT
Task Type Feature Request
Category General
Status Closed
Assigned To No-one
Architecture All
Severity Very Low
Priority Normal
Reported Version 4.2.1
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Summary and Info:

I noticed that there are a lot more http than https mirrors and started thinking does pacman support DANE and after not finding anything about it from git logs or search engines I think it doesn't.

With DANE the mirrors could have even self-signed certificates which would then be verified with DANE and DNSSEC and I think if it was supported more mirrors might have HTTPS available. I don't know how many of mirrors have even DNSSEC at the moment.

https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities
This task depends upon

Closed by  Allan McRae (Allan)
Tuesday, 25 August 2015, 23:03 GMT
Reason for closing:  Upstream
Additional comments about closing:  Requires libcurl support
Comment by Dave Reisner (falconindy) - Tuesday, 25 August 2015, 12:40 GMT
This has nothing to do with pacman (libalpm, really) and everything to do with libcurl. libcurl does not yet have DANE support. It's been on the TODO list for quite some time.

Loading...