[Bug 777217] New: osx: curl fails to download nettle tarball from https://ftp.gnu.org without certification

[GStreamer (GNOME Bugzilla)]

https://bugzilla.gnome.org/show_bug.cgi?id=777217

            Bug ID: 777217
           Summary: osx: curl fails to download nettle tarball from
                    https://ftp.gnu.org without certification
    Classification: Platform
           Product: GStreamer
           Version: git master
                OS: Mac OS
            Status: NEW
          Severity: major
          Priority: Normal
         Component: cerbero
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: hfink at toolsonair.com
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Created attachment 343431
  --> https://bugzilla.gnome.org/attachment.cgi?id=343431&action=edit
nettle: use http instead of https tarball location

On OSX, tarball downloads are handled by curl using insecure downloads (using
the "-k" parameter). However, downloading nettle tarballs from the https
resource fails with an error: 

curl -k -L https://ftp.gnu.org/gnu/nettle/nettle-3.3.tar.gz -o
~/nettle-3.3.tar.gz
curl: (56) SSLRead() return error -9841

This currently breaks the build on OSX. Note that on Linux the same command
would work.

Using secure downloads by omitting the "-k" would also work on OSX. So one
solution would be to simply turn on secure downloads for all dependencies on
OSX, and hope for the best. Another option to solve this, is to simply use http
instead of https for nettle. All other recipes currently downloading from
gtp.gnu.org are downloading over http, if I'm not mistaken. I have therefore
attached the patch for the latter workaround.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.