diff --git a/pkgs/build-support/fetchsvn/builder.sh b/pkgs/build-support/fetchsvn/builder.sh index d3099e7cccc..1f644fec83e 100644 --- a/pkgs/build-support/fetchsvn/builder.sh +++ b/pkgs/build-support/fetchsvn/builder.sh @@ -7,7 +7,11 @@ echo $prefetch if test -e "$prefetch"; then mv $prefetch $out else - svn export -r "$rev" "$url" $out + # Pipe the "p" character into Subversion to force it to accept the + # server's certificate. This is perfectly safe: we don't care + # whether the server is being spoofed --- only the cryptographic + # hash of the output matters. + echo 'p' | svn export -r "$rev" "$url" $out fi actual=$(nix-hash $out)