Re: luarocks lpeg rockspec + https (Re: hosting lua.org)

["Pierre Chapuis" <lua@...>]

On Wed, Aug 23, 2023, at 00:05, nobody wrote:
> However, the luarocks lpeg install will still download via http and only 
> check an md5 sum… what's the proper way to upgrade basically all the 
> rocks files to use https instead, and maybe add more robust checksums as 
> well?

Not sure what you mean re. HTTP here. All official LuaRocks mirrors use 
HTTPS and have for a long time now.

LuaRocks can sometimes fallback to HTTP if you have luasocket installed
*and* luasec not installed. In that case it will warn.

If you have luasocket and luasec it will use HTTPS with luasocket, and if
you do not have luasocket it will use HTTPS with cURL.

-- 
Pierre Chapuis