Skip to content

Commit

Permalink
Use HTTPS explicitly in curl command for Aztec installation
Browse files Browse the repository at this point in the history
Updated the onCreateCommand.sh script to include 'https://' in the curl command
when fetching the Aztec installation script. This ensures the script is downloaded
over a secure HTTPS connection, enhancing security by preventing potential
man-in-the-middle attacks during the download process.
  • Loading branch information
christopherb committed Dec 24, 2024
1 parent 2274402 commit a63a909
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 6 deletions.
2 changes: 1 addition & 1 deletion .devcontainer/scripts/onCreateCommand.sh
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
TYPE=$1
NAME=$2

curl -s install.aztec.network | NON_INTERACTIVE=1 bash -s
curl -s https://install.aztec.network | NON_INTERACTIVE=1 bash -s
docker compose -f $HOME/.aztec/docker-compose.sandbox.yml pull

if ! grep -q "PXE_URL" ~/.bashrc; then
Expand Down
10 changes: 5 additions & 5 deletions aztec-up/bin/aztec-install
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ BIN_PATH=${BIN_PATH:-$AZTEC_PATH/bin}

# Define version if specified, otherwise set to "latest".
VERSION=${VERSION:-"latest"}
INSTALL_HOST=install.aztec.network.s3-website.eu-west-2.amazonaws.com
INSTALL_HOST=install.aztec.network

[ -z "${NON_INTERACTIVE:-}" ] && title

Expand Down Expand Up @@ -113,9 +113,9 @@ fi
function download_docker_compose {
local install_url
if [ "$VERSION" != "latest" ]; then
install_url="http://$INSTALL_HOST/$VERSION/docker-compose.${1}.yml"
install_url="https://$INSTALL_HOST/$VERSION/docker-compose.${1}.yml"
else
install_url="http://$INSTALL_HOST/docker-compose.${1}.yml"
install_url="https://$INSTALL_HOST/docker-compose.${1}.yml"
fi
curl -fsSL "$install_url" -o $AZTEC_PATH/docker-compose.${1}.yml
echo "Installed docker-compose.${1}.yml"
Expand All @@ -127,9 +127,9 @@ download_docker_compose "test"
function install_bin {
local install_url
if [ "$VERSION" != "latest" ]; then
install_url="http://$INSTALL_HOST/$VERSION/$1"
install_url="https://$INSTALL_HOST/$VERSION/$1"
else
install_url="http://$INSTALL_HOST/$1"
install_url="https://$INSTALL_HOST/$1"
fi
curl -fsSL "$install_url" -o "$BIN_PATH/$1"
chmod +x "$BIN_PATH/$1"
Expand Down

0 comments on commit a63a909

Please sign in to comment.