Patch #13173
closed
Put source :rubygems url HTTP secure
Added by Benjamin Jeanjean almost 12 years ago.
Updated over 11 years ago.
Category:
Third-party libraries
Description
I've got some warnings after upgrade my Apache passenger's module to a newer version.
It seems like we now have to use HTTPS instead of HTTP in the Gemfile for "source".
I've attached a patch.
Files
- Target version set to Candidate for next minor release
Well I would appreciate that this could get it's way in 2.3, as it is just a small change but would give a little bit more security. :-)
- Category set to Third-party libraries
- Status changed from New to Closed
- Assignee set to Jean-Philippe Lang
- Target version changed from Candidate for next minor release to 2.3.0
- Status changed from Closed to Reopened
Sorry, I had to remove it when trying ruby 2.0 (cert validation error) but I didn't mean to commit it.
This error needs further investigation.
Jean-Philippe Lang wrote:
Sorry, I had to remove it when trying ruby 2.0 (cert validation error) but I didn't mean to commit it.
I cannot reproduce on Ruby 2.0 which installed by rvm on CentOS 6.
$ ruby --version
ruby 2.0.0p0 (2013-02-24 revision 39474) [x86_64-linux]
$ ruby script/about
/REDMINE/hg-workdir/redmine-bb-all/lib/plugins/rfpdf/lib/tcpdf.rb:42: warning: class variable access from toplevel
/REDMINE/hg-workdir/redmine-bb-all/lib/plugins/rfpdf/lib/tcpdf.rb:43: warning: class variable access from toplevel
/REDMINE/hg-workdir/redmine-bb-all/lib/SVG/Graph/Graph.rb:3: warning: class variable access from toplevel
Environment:
Redmine version 2.3.0.devel
Ruby version 2.0.0 (x86_64-linux)
Rails version 3.2.12
Environment production
Database adapter SQLite
Redmine plugins:
no plugin installed
- Status changed from Reopened to Closed
Toshi MARUYAMA wrote:
r11486 roll backed http.
Reverted in r11487.
Also available in: Atom
PDF