Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

netfilter: Replace HTTP links with HTTPS ones

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
If not .svg:
For each line:
If doesn't contain `\bxmlns\b`:
For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
If both the HTTP and HTTPS versions
return 200 OK and serve the same content:
Replace HTTP with HTTPS.

Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

authored by

Alexander A. Klimov and committed by
Pablo Neira Ayuso
50935339 954d8297

+10 -10
+1 -1
include/uapi/linux/netfilter/xt_connmark.h
··· 4 4 5 5 #include <linux/types.h> 6 6 7 - /* Copyright (C) 2002,2004 MARA Systems AB <http://www.marasystems.com> 7 + /* Copyright (C) 2002,2004 MARA Systems AB <https://www.marasystems.com> 8 8 * by Henrik Nordstrom <hno@marasystems.com> 9 9 * 10 10 * This program is free software; you can redistribute it and/or modify
+1 -1
net/decnet/netfilter/dn_rtmsg.c
··· 6 6 * 7 7 * DECnet Routing Message Grabulator 8 8 * 9 - * (C) 2000 ChyGwyn Limited - http://www.chygwyn.com/ 9 + * (C) 2000 ChyGwyn Limited - https://www.chygwyn.com/ 10 10 * 11 11 * Author: Steven Whitehouse <steve@chygwyn.com> 12 12 */
+1 -1
net/netfilter/Kconfig
··· 447 447 replace the existing {ip,ip6,arp,eb}_tables infrastructure. It 448 448 provides a pseudo-state machine with an extensible instruction-set 449 449 (also known as expressions) that the userspace 'nft' utility 450 - (http://www.netfilter.org/projects/nftables) uses to build the 450 + (https://www.netfilter.org/projects/nftables) uses to build the 451 451 rule-set. It also comes with the generic set infrastructure that 452 452 allows you to construct mappings between matchings and actions 453 453 for performance lookups.
+2 -2
net/netfilter/nft_set_pipapo.c
··· 312 312 * Jay Ligatti, Josh Kuhn, and Chris Gage. 313 313 * Proceedings of the IEEE International Conference on Computer 314 314 * Communication Networks (ICCCN), August 2010. 315 - * http://www.cse.usf.edu/~ligatti/papers/grouper-conf.pdf 315 + * https://www.cse.usf.edu/~ligatti/papers/grouper-conf.pdf 316 316 * 317 317 * [Rottenstreich 2010] 318 318 * Worst-Case TCAM Rule Expansion ··· 325 325 * Kirill Kogan, Sergey Nikolenko, Ori Rottenstreich, William Culhane, 326 326 * and Patrick Eugster. 327 327 * Proceedings of the 2014 ACM conference on SIGCOMM, August 2014. 328 - * http://www.sigcomm.org/sites/default/files/ccr/papers/2014/August/2619239-2626294.pdf 328 + * https://www.sigcomm.org/sites/default/files/ccr/papers/2014/August/2619239-2626294.pdf 329 329 */ 330 330 331 331 #include <linux/kernel.h>
+1 -1
net/netfilter/xt_CONNSECMARK.c
··· 6 6 * with the SECMARK target and state match. 7 7 * 8 8 * Based somewhat on CONNMARK: 9 - * Copyright (C) 2002,2004 MARA Systems AB <http://www.marasystems.com> 9 + * Copyright (C) 2002,2004 MARA Systems AB <https://www.marasystems.com> 10 10 * by Henrik Nordstrom <hno@marasystems.com> 11 11 * 12 12 * (C) 2006,2008 Red Hat, Inc., James Morris <jmorris@redhat.com>
+1 -1
net/netfilter/xt_connmark.c
··· 2 2 /* 3 3 * xt_connmark - Netfilter module to operate on connection marks 4 4 * 5 - * Copyright (C) 2002,2004 MARA Systems AB <http://www.marasystems.com> 5 + * Copyright (C) 2002,2004 MARA Systems AB <https://www.marasystems.com> 6 6 * by Henrik Nordstrom <hno@marasystems.com> 7 7 * Copyright © CC Computer Consultants GmbH, 2007 - 2008 8 8 * Jan Engelhardt <jengelh@medozas.de>
+1 -1
net/netfilter/xt_nfacct.c
··· 1 1 // SPDX-License-Identifier: GPL-2.0-or-later 2 2 /* 3 3 * (C) 2011 Pablo Neira Ayuso <pablo@netfilter.org> 4 - * (C) 2011 Intra2net AG <http://www.intra2net.com> 4 + * (C) 2011 Intra2net AG <https://www.intra2net.com> 5 5 */ 6 6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 7 7
+1 -1
net/netfilter/xt_time.c
··· 5 5 * based on ipt_time by Fabrice MARIE <fabrice@netfilter.org> 6 6 * This is a module which is used for time matching 7 7 * It is using some modified code from dietlibc (localtime() function) 8 - * that you can find at http://www.fefe.de/dietlibc/ 8 + * that you can find at https://www.fefe.de/dietlibc/ 9 9 * This file is distributed under the terms of the GNU General Public 10 10 * License (GPL). Copies of the GPL can be obtained from gnu.org/gpl. 11 11 */