diff options
| author | Martin André <m.andre@redhat.com> | 2018-09-10 18:49:02 +0200 |
|---|---|---|
| committer | Martin André <m.andre@redhat.com> | 2018-09-10 19:19:16 +0200 |
| commit | 27bab79096584b50947f0d81d41ad2e143c1041e (patch) | |
| tree | d5d4a04a1b8bfe4ac9554e9f954748ece2ab06e1 /docker/base | |
| parent | a4187d9d021c3c38c11c709435c0c69fee5e5a43 (diff) | |
| download | kolla-27bab79096584b50947f0d81d41ad2e143c1041e.tar.gz kolla-27bab79096584b50947f0d81d41ad2e143c1041e.zip | |
Download binaries more securely
Obtain binaries from encrypted source when we're unable to check for
their signatures. This should provide better security than downloading
the files over HTTP but does not replace signature verification or file
integrity check.
Related-Bug: #1791674
Change-Id: I7d6eed9ab14ceb130ea4f5f03d893ddaaa0a7acd
Diffstat (limited to 'docker/base')
| -rw-r--r-- | docker/base/opendaylight.repo | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docker/base/opendaylight.repo b/docker/base/opendaylight.repo index 8c0c299fd..44c1eb26d 100644 --- a/docker/base/opendaylight.repo +++ b/docker/base/opendaylight.repo @@ -1,5 +1,6 @@ [opendaylight] name=CentOS CBS OpenDaylight Release Repository -baseurl=http://cbs.centos.org/repos/nfv7-opendaylight-6-release/x86_64/os/ +# opendaylight package is not signed, so download from HTTPS source at least +baseurl=https://cbs.centos.org/repos/nfv7-opendaylight-6-release/x86_64/os/ enabled=1 gpgcheck=0 |