[pypy-issue] Issue #2939: Buildbot is not available via TLS (pypy/pypy)

KOLANICH issues-reply at bitbucket.org
Sat Jan 19 10:38:47 EST 2019


New issue 2939: Buildbot is not available via TLS
https://bitbucket.org/pypy/pypy/issues/2939/buildbot-is-not-available-via-tls

KOLANICH:

Binaries built with a buildbot are not authenticated, so an adversary can inject malware into them. And users have to use them since the releases are very rare and there are no packages for popular distros.

1. Setup TLS securely.
2. Generate an OpenPGP keypair for buildbot.
3. Setup signing.




More information about the pypy-issue mailing list