[Buildroot] [PATCH] package/mksh: fix project URL in Config.in

[Carlos Santos]

COn Fri, Nov 12, 2021 at 4:33 PM Yann E. MORIN <yann.morin.1998 at free.fr> wrote:
>
> Carlos, All,
>
> On 2021-11-12 15:59 -0300, unixmania at gmail.com spake thusly:
> > From: Carlos Santos <unixmania at gmail.com>
> >
> > It's https://www.mirbsd.org/mksh.htm
>
> ... which does not support TLS 1.2, and so recent browsers whine about
> an insecure connection, like Firefox:
>
[...]
>
> And indeed, enabling TLS 1.0 and 1.1 allows the connection to succeed...
> Too bad... :-(
>
> And of course, we can't download it either, of course, but fortunately,
> there is the fallback to s.b.o :
>
>     >>> mksh 59c Downloading
>     wget --passive-ftp -nd -t 3 -O '/home/ymorin/dev/buildroot/O/build/.mksh-R59c.tgz.5iZMHq/output' 'https://www.mirbsd.org/MirOS/dist/mir/mksh/mksh-R59c.tgz'
>     --2021-11-12 20:24:00-- https://www.mirbsd.org/MirOS/dist/mir/mksh/mksh-R59c.tgz
>     Resolving www.mirbsd.org (www.mirbsd.org)... 62.138.145.52, 2001:470:1f0b:76c::1
>     Connecting to www.mirbsd.org (www.mirbsd.org)|62.138.145.52|:443...  connected.
>     OpenSSL: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol
>     Unable to establish SSL connection.
>     wget --passive-ftp -nd -t 3 -O '/home/ymorin/dev/buildroot/O/build/.mksh-R59c.tgz.ojSduH/output' 'http://sources.buildroot.net/mksh/mksh-R59c.tgz'
>     --2021-11-12 20:24:01--  http://sources.buildroot.net/mksh/mksh-R59c.tgz
>     Resolving sources.buildroot.net (sources.buildroot.net)... 172.67.72.56, 104.26.1.37, 104.26.0.37, ...
>     Connecting to sources.buildroot.net (sources.buildroot.net)|172.67.72.56|:80... connected.
>     HTTP request sent, awaiting response... 200 OK
>
> Meh... :-(
>
> Should we switch over to using plain http instead? It is not much less
> secure than TLS 1.0 or 1.1, for which there are known and practical
> attacks, and plain http will work. Also, we do have the hashes, so we
> can at least assess the integrity and authenticity of the download.

I already reported the problem to the project owner. Waiting for a response.

-- 
Carlos Santos <unixmania at gmail.com>