[CentOS-devel] Source code missing, and insecure delivery pages linked

On 2/9/21 6:02 PM, Fabian Arrotin wrote:
> On 09/02/2021 07:09, Chris Drake wrote:
>> 1. Your info page here:
> <snip>
>>
>> 3. Source code is still missing.  The folder structure exists, but none
>> of the files are in there.
>>
>> Some new examples
>>
>> https://git.centos.org/rpms/sendmail/tree
>> <https://git.centos.org/rpms/sendmail/tree> (no source)
> 
> What about checking in the correct branch ?
> For 8-stream, it's all in the c8s branch :
> https://git.centos.org/rpms/sendmail/tree/c8s
Since it was pointed out that the source is missing (404) and folks keep
insisting on it, this is how you get it:

$ cd /tmp/
$ git clone https://git.centos.org/rpms/sendmail
[...]
$ git clone https://git.centos.org/centos-git-common
[...]
$ cd sendmail/
$ git checkout -b c8s origin/c8s
Branch 'c8s' set up to track remote branch 'c8s' from 'origin'.
Switched to a new branch 'c8s'
$ git log
commit 3aa4661d2c59bce27e291feec0d76e94d9afaa17 (HEAD -> c8s, tag:
imports/c8s/sendmail-8.15.2-34.el8, origin/c8s)
Author: CentOS Sources <bugs at centos.org>
[...]
$ ../centos-git-common/get_sources.sh
Retrieving
https://git.centos.org/sources/sendmail/c8s/5801d4b06f4e38ef228a5954a44d17636eaa5a16
  % Total    % Received % Xferd  Average Speed   Time    Time     Time
Current
                                 Dload  Upload   Total   Spent    Left
Speed
100 2155k  100 2155k    0     0  1335k      0  0:00:01  0:00:01 --:--:--
1336k
$ rpmbuild -bs SPECS/sendmail.spec
setting SOURCE_DATE_EPOCH=1606780800
Wrote: /tmp/sendmail/SRPMS/sendmail-8.15.2-34.fc33.src.rpm

And as Fabian explained in the other email in this thread, all of that
over https and thus far from being "not secure".

~pete