[PATCH v2 3/3] treewide: switch to HTTPS by default

Petr Štetiar ynezz at true.cz
Mon Jul 27 05:56:35 EDT 2020


As there is now wolfSSL included by default due to SAE/WPA3 we can
finally switch to TLS/SSL in other parts as well.

Tested-by: Paul Spooren <mail at aparcar.org>
Signed-off-by: Petr Štetiar <ynezz at true.cz>
---

changed in v2:

 * replaced ca-certificates with ca-bundle package

 README             | 2 +-
 include/target.mk  | 6 +++++-
 include/version.mk | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/README b/README
index c867c1fa4da8..d5c4ae3ec8e0 100644
--- a/README
+++ b/README
@@ -29,6 +29,6 @@ chosen applications for your target system.
 
 Sunshine!
 	Your OpenWrt Community
-	http://www.openwrt.org
+	https://www.openwrt.org
 
 
diff --git a/include/target.mk b/include/target.mk
index 6ed6565bdaa2..b9d12406ad70 100644
--- a/include/target.mk
+++ b/include/target.mk
@@ -13,7 +13,11 @@ __target_inc=1
 DEVICE_TYPE?=router
 
 # Default packages - the really basic set
-DEFAULT_PACKAGES:=base-files libc libgcc busybox dropbear mtd uci opkg netifd fstools uclient-fetch logd urandom-seed urngd
+DEFAULT_PACKAGES:= \
+	base-files libc libgcc busybox dropbear mtd uci opkg netifd \
+	fstools uclient-fetch logd urandom-seed urngd libustream-wolfssl \
+	ca-bundle
+
 # For the basic set
 DEFAULT_PACKAGES.basic:=
 # For nas targets
diff --git a/include/version.mk b/include/version.mk
index 7d3c1ad6400f..b7f42e13bb1b 100644
--- a/include/version.mk
+++ b/include/version.mk
@@ -32,7 +32,7 @@ VERSION_CODE:=$(call qstrip,$(CONFIG_VERSION_CODE))
 VERSION_CODE:=$(if $(VERSION_CODE),$(VERSION_CODE),$(REVISION))
 
 VERSION_REPO:=$(call qstrip,$(CONFIG_VERSION_REPO))
-VERSION_REPO:=$(if $(VERSION_REPO),$(VERSION_REPO),http://downloads.openwrt.org/snapshots)
+VERSION_REPO:=$(if $(VERSION_REPO),$(VERSION_REPO),https://downloads.openwrt.org/snapshots)
 
 VERSION_DIST:=$(call qstrip,$(CONFIG_VERSION_DIST))
 VERSION_DIST:=$(if $(VERSION_DIST),$(VERSION_DIST),OpenWrt)



More information about the openwrt-devel mailing list