From: Michalis Vasileiadis <67660547+vmihalis@users.noreply.github.com>
Date: Fri, 29 May 2026 13:30:34 +0000 (+0800)
Subject: build: fetch config.guess/config.sub over HTTPS in makerelease.sh
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=c38b2decf8a47c772f2e267fd2164530487cfdea;p=thirdparty%2Flibarchive.git

build: fetch config.guess/config.sub over HTTPS in makerelease.sh

Switch the release-time config.guess/config.sub fetches from http:// to
https:// and add -fsSL so a failed fetch errors out instead of writing an
error page into the helper script (CWE-494).
---

diff --git a/build/makerelease.sh b/build/makerelease.sh
index 82843d677..142056d84 100755
--- a/build/makerelease.sh
+++ b/build/makerelease.sh
@@ -50,8 +50,8 @@ export MAKE_LIBARCHIVE_RELEASE="1"
 /bin/sh build/autogen.sh
 
 # Get the newest config.guess/config.sub from savannah.gnu.org
-curl 'http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD' > build/autoconf/config.guess
-curl 'http://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub;hb=HEAD' > build/autoconf/config.sub
+curl -fsSL 'https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.guess;hb=HEAD' > build/autoconf/config.guess
+curl -fsSL 'https://git.savannah.gnu.org/gitweb/?p=config.git;a=blob_plain;f=config.sub;hb=HEAD' > build/autoconf/config.sub
 
 ./configure
 make distcheck