fastest_pkg.py: HTTPS

[grahamperrin]

Towards consistency with pkg: use https by default · freebsd/freebsd-src@d557a86

d557a86c879a pkg: use https by default

From https://reviews.freebsd.org/D40473:

… base is providing a CA root bundle suitable to validate the certificates used by the project. …

Cross-reference: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273833

[grahamperrin]

In addition, will changes to lines 87 and 89 be appropriate? In ehaupt:master:

fastest_pkg/fastest_pkg/fastest_pkg.py

Lines 86 to 89 in ddf442a

	try:
	pkg_mirrors = resolver.resolve("_http._tcp.pkg.all.freebsd.org", "SRV")
	except AttributeError:
	pkg_mirrors = resolver.query("_http._tcp.pkg.all.freebsd.org", "SRV")

More generally, I guess that a change to HTTPS should not be made until the bundle becomes broadly available to end users.

[ehaupt]

When using HTTPS the SRV query should probably be adjusted even though the list is currently identical apart from the port (which is not used in the script).

$ dig +short -t srv _http._tcp.pkg.all.freebsd.org
50 10 80 pkg0.bbt.freebsd.org.
50 10 80 pkg0.bme.freebsd.org.
50 10 80 pkg0.bra.freebsd.org.
50 10 80 pkg0.fra.freebsd.org.
50 10 80 pkg0.isc.freebsd.org.
50 10 80 pkg0.kul.freebsd.org.
50 10 80 pkg0.kwc.freebsd.org.
50 10 80 pkg0.nyi.freebsd.org.
50 10 80 pkg0.tuk.freebsd.org.
50 10 80 pkg0.twn.freebsd.org.
50 10 80 pkg0.jinx.freebsd.org.

$ dig +short -t srv _https._tcp.pkg.all.freebsd.org
50 10 443 pkg0.bbt.freebsd.org.
50 10 443 pkg0.bme.freebsd.org.
50 10 443 pkg0.bra.freebsd.org.
50 10 443 pkg0.fra.freebsd.org.
50 10 443 pkg0.isc.freebsd.org.
50 10 443 pkg0.kul.freebsd.org.
50 10 443 pkg0.kwc.freebsd.org.
50 10 443 pkg0.nyi.freebsd.org.
50 10 443 pkg0.tuk.freebsd.org.
50 10 443 pkg0.twn.freebsd.org.
50 10 443 pkg0.jinx.freebsd.org.

I am in favor of introducing a command line option for disabling HTTPS but use it by default. Maybe --disable-ssl. Thoughts?

[grahamperrin]

Thoughts?

Thinking … if you become impatient, after a few days or weeks, nudge me :)

[grahamperrin]

after a few days or weeks,

or years, LOL!

I think, please do whatever pleases you :-)