On Thu, Jun 29, 2017 at 09:38:31AM +0200, Julian Andres Klode wrote:
> APT 1.5~alpha1 landed in experimental today(ish). It includes three
> big changes (one of which, the new https support, is opt-in).

1.5~alpha2 fixes a critical security issue for people that set
a custom CaInfo option: Alpha 1 always loaded the system-wide CA
store, now only the custom one is loaded.

As another notable change, you can now use the http method for
tor+https, just set Dir::Bin::Methods::tor+https to "http".

Also SRV support now properly uses the port specified in the
SRV response, not the original port (there will be a stable
update for that).

-- 
Debian Developer - deb.li/jak | jak-linux.org - free software dev
                  |  Ubuntu Core Developer |
When replying, only quote what is necessary, and write each reply
directly below the part(s) it pertains to ('inline').  Thank you.

Reply via email to