Package: rubygems Version: 1.8.24-1 Severity: important Hello,
It seems that when gem install is run, it fetches gems via http by default in debian. This can be easily configured to use https, and should be configured that way by default in debian. This is how it can be done manually: gem sources --add https://rubygems.org gem sources --remove http://rubygems.org/ This configures ~/.gemrc to have: :sources: - https://rubygems.org This should be done internally in rubygems to use https instead by default in Debian. thank you! micah -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rubygems depends on: ii ruby1.8 1.8.7.358-9 Versions of packages rubygems recommends: ii build-essential 11.6 ii ruby1.8-dev 1.8.7.358-9 rubygems suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
