[ARROW-5523] [Python] [Packaging] Use HTTPS consistently for downloading dependencies

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.13.0
• Fix Version/s: 0.16.0
• Component/s: Packaging, Python
• Labels: pull-request-available
• External issue URL: https://github.com/apache/arrow/issues/21971
• Assignee: Neal Richardson
• Reporter: Antoine Pitrou
• Created: 06/Jun/19 11:37
• Updated: 11/Jan/23 07:41
• Resolved: 14/Dec/19 19:36

Description

Some download URLs in the manylinux scripts use plain-text protocols:

python/manylinux1/scripts/build_thrift.sh:wget http://archive.apache.org/dist/thrift/${THRIFT_VERSION}/thrift-${THRIFT_VERSION}.tar.gz
python/manylinux1/scripts/build_python.sh:AUTOCONF_DOWNLOAD_URL=http://ftp.gnu.org/gnu/autoconf
python/manylinux1/scripts/build_python.sh:AUTOMAKE_DOWNLOAD_URL=http://ftp.gnu.org/gnu/automake
python/manylinux1/scripts/build_python.sh:LIBTOOL_DOWNLOAD_URL=http://ftp.gnu.org/gnu/libtool
python/manylinux1/scripts/build_bison.sh:wget http://ftp.gnu.org/gnu/bison/bison-3.0.4.tar.gz
python/manylinux1/scripts/build_re2.sh:curl -sL "http://github.com/google/re2/archive/${RE2_VERSION}.tar.gz" -o re2-${RE2_VERSION}.tar.gz
python/manylinux1/scripts/build_llvm.sh:curl -sL http://releases.llvm.org/${LLVM_VERSION}/llvm-${LLVM_VERSION}.src.tar.xz -o llvm-${LLVM_VERSION}.src.tar.xz
python/manylinux1/scripts/build_clang.sh:curl -sL http://releases.llvm.org/${LLVM_VERSION}/cfe-${LLVM_VERSION}.src.tar.xz -o cfe-${LLVM_VERSION}.src.tar.xz

Issue Links

• links to: GitHub Pull Request #6017