Commit 7a6498eb authored by Alexander A. Klimov's avatar Alexander A. Klimov Committed by David S. Miller
Browse files

Replace HTTP links with HTTPS ones: IPv* 

Rationale:
Reduces attack surface on kernel devs opening the links for MITM
as HTTPS traffic is much harder to manipulate.

Deterministic algorithm:
For each file:
  If not .svg:
    For each line:
      If doesn't contain `\bxmlns\b`:
        For each link, `\bhttp://[^#

 \t\r\n]*(?:\w|/)`:
          If both the HTTP and HTTPS versions
          return 200 OK and serve the same content:
            Replace HTTP with HTTPS.

Signed-off-by: default avatarAlexander A. Klimov <grandmaster@al2klimov.de>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 1eafa736

net/ipv4/Kconfig

+4 −4
Original line number Diff line number Diff line
@@ -10,7 +10,7 @@ config IP_MULTICAST 
	  intend to participate in the MBONE, a high bandwidth network on top

	  of the Internet which carries audio and video broadcasts. More

	  information about the MBONE is on the WWW at

	  <http://www.savetz.com/mbone/>. For most people, it's safe to say N.

	  <https://www.savetz.com/mbone/>. For most people, it's safe to say N.



config IP_ADVANCED_ROUTER

	bool "IP: advanced router"
@@ -73,7 +73,7 @@ config IP_MULTIPLE_TABLES 


	  If you need more information, see the Linux Advanced

	  Routing and Traffic Control documentation at

	  <http://lartc.org/howto/lartc.rpdb.html>

	  <https://lartc.org/howto/lartc.rpdb.html>



	  If unsure, say N.
@@ -280,7 +280,7 @@ config SYN_COOKIES 
	  continue to connect, even when your machine is under attack. There

	  is no need for the legitimate users to change their TCP/IP software;

	  SYN cookies work transparently to them. For technical information

	  about SYN cookies, check out <http://cr.yp.to/syncookies.html>.

	  about SYN cookies, check out <https://cr.yp.to/syncookies.html>.



	  If you are SYN flooded, the source address reported by the kernel is

	  likely to have been forged by the attacker; it is only reported as
@@ -525,7 +525,7 @@ config TCP_CONG_HSTCP 
	  A modification to TCP's congestion control mechanism for use

	  with large congestion windows. A table indicates how much to

	  increase the congestion window by when an ACK is received.

	  For more detail see http://www.icir.org/floyd/hstcp.html

	  For more detail see https://www.icir.org/floyd/hstcp.html



config TCP_CONG_HYBLA

	tristate "TCP-Hybla congestion control algorithm"

net/ipv4/cipso_ipv4.c

+2 −2
Original line number Diff line number Diff line
@@ -10,9 +10,9 @@ 
 *

 * The CIPSO draft specification can be found in the kernel's Documentation

 * directory as well as the following URL:

 *   http://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt

 *   https://tools.ietf.org/id/draft-ietf-cipso-ipsecurity-01.txt

 * The FIPS-188 specification can be found at the following URL:

 *   http://www.itl.nist.gov/fipspubs/fip188.htm

 *   https://www.itl.nist.gov/fipspubs/fip188.htm

 *

 * Author: Paul Moore <paul.moore@hp.com>

 */

net/ipv4/fib_trie.c

+1 −1
Original line number Diff line number Diff line
@@ -13,7 +13,7 @@ 
 *

 * An experimental study of compression methods for dynamic tries

 * Stefan Nilsson and Matti Tikkanen. Algorithmica, 33(1):19-33, 2002.

 * http://www.csc.kth.se/~snilsson/software/dyntrie2/

 * https://www.csc.kth.se/~snilsson/software/dyntrie2/

 *

 * IP-address lookup using LC-tries. Stefan Nilsson and Gunnar Karlsson

 * IEEE Journal on Selected Areas in Communications, 17(6):1083-1092, June 1999

net/ipv4/netfilter/ipt_CLUSTERIP.c

+1 −1
Original line number Diff line number Diff line
@@ -3,7 +3,7 @@ 
 * (C) 2003-2004 by Harald Welte <laforge@netfilter.org>

 * based on ideas of Fabio Olive Leite <olive@unixforge.org>

 *

 * Development of this code funded by SuSE Linux AG, http://www.suse.com/

 * Development of this code funded by SuSE Linux AG, https://www.suse.com/

 */

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

#include <linux/module.h>

net/ipv4/tcp_highspeed.c

+1 −1
Original line number Diff line number Diff line
@@ -2,7 +2,7 @@ 
/*

 * Sally Floyd's High Speed TCP (RFC 3649) congestion control

 *

 * See http://www.icir.org/floyd/hstcp.html

 * See https://www.icir.org/floyd/hstcp.html

 *

 * John Heffner <jheffner@psc.edu>

 */

CRA Git | Maintained and supported by SUSTech CRA and CCSE