recipes: Move all recipes to HTTPS

Also add a check in Cerbero to ensure that no insecure URLs are used.

70 files changed, 79 insertions, 72 deletions

diff --git a/cerbero/build/source.py b/cerbero/build/source.py
index 035c8384..6b03de37 100644
--- a/cerbero/build/source.py
+++ b/cerbero/build/source.py
@@ -20,7 +20,6 @@ import os
 import shutil
 import tarfile
 import urllib.request, urllib.parse, urllib.error
-import urllib.parse
 
 from cerbero.config import Platform
 from cerbero.utils import git, svn, shell, _
@@ -108,6 +107,9 @@ class Tarball (Source):
         split[2] = urllib.parse.quote(split[2])
         self.url = urllib.parse.urlunsplit(split)
         self.mirror_url = urllib.parse.urljoin(TARBALL_MIRROR, self.tarball_name)
+        o = urllib.parse.urlparse(self.url)
+        if o.scheme in ('http', 'ftp'):
+            raise FatalError('Download URL {!r} must use HTTPS'.format(self.url))
 
     def fetch(self, redownload=False):
         if not os.path.exists(self.repo_dir):
@@ -122,7 +124,7 @@ class Tarball (Source):
             return
         m.action(_('Fetching tarball %s to %s') %
                  (self.url, self.download_path))
-        # Enable certificate checking Linux for now
+        # Enable certificate checking only on Linux for now
         # FIXME: Add more platforms here after testing
         cc = self.config.platform == Platform.LINUX
         try:
diff --git a/recipes/a52dec.recipe b/recipes/a52dec.recipe
index ecf8d1e1..3b1f32e9 100644
--- a/recipes/a52dec.recipe
+++ b/recipes/a52dec.recipe
@@ -4,7 +4,9 @@ class Recipe(recipe.Recipe):
     name = 'a52dec'
     version = '0.7.4'
     stype = SourceType.TARBALL
-    url = 'http://liba52.sourceforge.net/files/a52dec-%(version)s.tar.gz'
+    # This URL doesn't support https, so we don't use it
+    #url = 'http://liba52.sourceforge.net/files/a52dec-%(version)s.tar.gz'
+    url = 'https://gstreamer.freedesktop.org/src/mirror/a52dec-%(version)s.tar.gz'
     licenses = [License.GPLv2Plus]
     configure_options = '--with-pic --enable-shared'
     autoreconf = True
diff --git a/recipes/build-tools/autoconf.recipe b/recipes/build-tools/autoconf.recipe
index 1342fd87..c734a72d 100644
--- a/recipes/build-tools/autoconf.recipe
+++ b/recipes/build-tools/autoconf.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '2.69'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.xz'
+    url = 'https://ftp.gnu.org/gnu/autoconf/autoconf-%(version)s.tar.xz'
     deps = ['m4']
 
     files_bin = [
diff --git a/recipes/build-tools/automake.recipe b/recipes/build-tools/automake.recipe
index b8662fa1..54fed314 100644
--- a/recipes/build-tools/automake.recipe
+++ b/recipes/build-tools/automake.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '1.15.1'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/automake/automake-1.15.1.tar.xz'
+    url = 'https://ftp.gnu.org/gnu/automake/automake-%(version)s.tar.xz'
     deps = ['autoconf', 'gettext-tools', 'gettext-m4']
 
     files_bin = ['bin/automake', 'bin/aclocal',
diff --git a/recipes/build-tools/bison.recipe b/recipes/build-tools/bison.recipe
index 6d336e3a..1fb6122b 100644
--- a/recipes/build-tools/bison.recipe
+++ b/recipes/build-tools/bison.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '3.0.4'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftpmirror.gnu.org/bison/bison-3.0.4.tar.gz'
+    url = 'https://ftpmirror.gnu.org/bison/bison-%(version)s.tar.gz'
 
     patches = ['bison/0001-Fix-build-invalid-instruction-on-macOS-10.3.patch']
 
diff --git a/recipes/build-tools/cmake.recipe b/recipes/build-tools/cmake.recipe
index b5f0b9d9..872a9186 100644
--- a/recipes/build-tools/cmake.recipe
+++ b/recipes/build-tools/cmake.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     licenses = [License.BSD_like]
     btype = BuildType.MAKEFILE
     stype = SourceType.TARBALL
-    url = 'http://www.cmake.org/files/v3.7/cmake-3.7.1.tar.gz'
+    url = 'https://www.cmake.org/files/v3.7/cmake-%(version)s.tar.gz'
     deps = ['autoconf']
 
     add_host_build_target = False
diff --git a/recipes/build-tools/gettext-m4.recipe b/recipes/build-tools/gettext-m4.recipe
index f6215ee2..cd7b9eb4 100644
--- a/recipes/build-tools/gettext-m4.recipe
+++ b/recipes/build-tools/gettext-m4.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '0.19.8.1'
     stype = SourceType.TARBALL
     tarball_dirname = 'gettext-%(version)s'
-    url = 'http://ftp.gnu.org/pub/gnu/gettext/gettext-0.19.8.1.tar.gz'
+    url = 'https://ftp.gnu.org/pub/gnu/gettext/gettext-%(version)s.tar.gz'
     # only libraries are LGPLv2+, tools are GPLv3+ and defined below
     licenses = [License.LGPLv2Plus]
     autoreconf = True
diff --git a/recipes/build-tools/gettext-tools.recipe b/recipes/build-tools/gettext-tools.recipe
index 51120f85..c5a46dce 100644
--- a/recipes/build-tools/gettext-tools.recipe
+++ b/recipes/build-tools/gettext-tools.recipe
@@ -11,7 +11,7 @@ class Recipe(recipe.Recipe):
     srcdir = 'gettext-tools'
     stype = SourceType.TARBALL
     tarball_dirname = 'gettext-%(version)s'
-    url = 'http://ftp.gnu.org/pub/gnu/gettext/gettext-0.19.8.1.tar.gz'
+    url = 'https://ftp.gnu.org/pub/gnu/gettext/gettext-%(version)s.tar.gz'
     platform_deps = {
             Platform.DARWIN:  ['sed'],
             Platform.WINDOWS: ['libiconv', 'mingw-runtime'],}
diff --git a/recipes/build-tools/glib-tools.recipe b/recipes/build-tools/glib-tools.recipe
index df686986..2cdf98b1 100644
--- a/recipes/build-tools/glib-tools.recipe
+++ b/recipes/build-tools/glib-tools.recipe
@@ -4,7 +4,8 @@ class Recipe(recipe.Recipe):
     name = 'glib-tools'
     version = '2.56.1'
     stype = SourceType.TARBALL
-    url = 'http://ftp.acc.umu.se/pub/GNOME/sources/glib/2.56/glib-%(version)s.tar.xz'
+    maj_ver = '.'.join(version.split('.')[0:2])
+    url = 'https://download.gnome.org/sources/glib/{}/glib-%(version)s.tar.xz'.format(maj_ver)
     tarball_dirname = 'glib-%(version)s'
     licenses = [License.LGPLv2Plus]
     btype = BuildType.MESON
diff --git a/recipes/build-tools/gnu-sed.recipe b/recipes/build-tools/gnu-sed.recipe
index 12272e2c..6d46db30 100644
--- a/recipes/build-tools/gnu-sed.recipe
+++ b/recipes/build-tools/gnu-sed.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '4.2.2'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/sed/sed-4.2.2.tar.gz'
+    url = 'https://ftp.gnu.org/gnu/sed/sed-%(version)s.tar.gz'
 
     def prepare(self):
         if needs_xcode8_sdk_workaround(self.config):
diff --git a/recipes/build-tools/gobject-introspection-m4.recipe b/recipes/build-tools/gobject-introspection-m4.recipe
index 144d5741..4b4721d1 100644
--- a/recipes/build-tools/gobject-introspection-m4.recipe
+++ b/recipes/build-tools/gobject-introspection-m4.recipe
@@ -11,8 +11,7 @@ class Recipe(recipe.Recipe):
     version = '1.54.1'
     stype = SourceType.TARBALL
     maj_ver = '.'.join(version.split('.')[0:2])
-    url = 'http://ftp.gnome.org/pub/GNOME/sources/{0}/{2}/{0}-{1}.tar.xz'
-    url = url.format(_name, version, maj_ver)
+    url = 'https://ftp.gnome.org/pub/GNOME/sources/{0}/{2}/{0}-{1}.tar.xz'.format(_name, version, maj_ver)
     srcdir = "{0}-{1}".format(_name, version)
     licenses = [License.GPLv2Plus]
     btype = BuildType.CUSTOM
diff --git a/recipes/build-tools/gperf.recipe b/recipes/build-tools/gperf.recipe
index 6b929c8f..0fd83d40 100644
--- a/recipes/build-tools/gperf.recipe
+++ b/recipes/build-tools/gperf.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '3.0.4'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/pub/gnu/gperf/gperf-3.0.4.tar.gz'
+    url = 'https://ftp.gnu.org/pub/gnu/gperf/gperf-%(version)s.tar.gz'
     patches = ['gperf-0001-Don-t-override-environment-AR.patch']
 
     files_bins = ['gperf']
diff --git a/recipes/build-tools/libtool.recipe b/recipes/build-tools/libtool.recipe
index 7870f089..45b0b0d9 100644
--- a/recipes/build-tools/libtool.recipe
+++ b/recipes/build-tools/libtool.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '2.4.6'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftpmirror.gnu.org/libtool/libtool-2.4.6.tar.gz'
+    url = 'https://ftp.gnu.org/gnu/libtool/libtool-%(version)s.tar.gz'
     deps = ['m4']
     patches = ['libtool/0001-Add-support-for-weak_framework-linking-on-Darwin.patch',
                'libtool/0002-libtool-Stop-adding-bind_at_load-on-all-Darwin.patch']
diff --git a/recipes/build-tools/m4.recipe b/recipes/build-tools/m4.recipe
index 610fd9a4..d0c487cc 100644
--- a/recipes/build-tools/m4.recipe
+++ b/recipes/build-tools/m4.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '1.4.18'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/m4/m4-1.4.18.tar.xz'
+    url = 'https://ftp.gnu.org/gnu/m4/m4-%(version)s.tar.xz'
     files_bins = ['m4']
 
     patches = ['m4/0001-Fix-build-invalid-instruction-on-macOS-10.13.patch',
diff --git a/recipes/build-tools/pkg-config.recipe b/recipes/build-tools/pkg-config.recipe
index 47ec61cd..aa8d9917 100644
--- a/recipes/build-tools/pkg-config.recipe
+++ b/recipes/build-tools/pkg-config.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '0.29.2'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url='http://pkgconfig.freedesktop.org/releases/pkg-config-0.29.2.tar.gz'
+    url = 'https://pkgconfig.freedesktop.org/releases/pkg-config-%(version)s.tar.gz'
     configure_options = '--with-internal-glib --disable-host-tool '
 
     files_bins = ['pkg-config']
diff --git a/recipes/build-tools/vala-m4.recipe b/recipes/build-tools/vala-m4.recipe
index f0d2b662..b8f983d2 100644
--- a/recipes/build-tools/vala-m4.recipe
+++ b/recipes/build-tools/vala-m4.recipe
@@ -12,7 +12,7 @@ class Recipe(recipe.Recipe):
     version = '0.35.2'
     stype = SourceType.TARBALL
     maj_ver = '.'.join(version.split('.')[0:2])
-    url = 'http://ftp.gnome.org/pub/GNOME/sources/{0}/{2}/{0}-{1}.tar.xz'
+    url = 'https://ftp.gnome.org/pub/GNOME/sources/{0}/{2}/{0}-{1}.tar.xz'
     url = url.format(_name, version, maj_ver)
     srcdir = "{0}-{1}".format(_name, version)
     licenses = [License.LGPLv2_1Plus]
diff --git a/recipes/build-tools/xz.recipe b/recipes/build-tools/xz.recipe
index de9d669b..f1c85d76 100644
--- a/recipes/build-tools/xz.recipe
+++ b/recipes/build-tools/xz.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '5.2.3'
     licenses = [License.GPLv3]
     stype = SourceType.TARBALL
-    url = 'http://tukaani.org/xz/xz-%(version)s.tar.bz2'
+    url = 'https://download.sourceforge.net/lzmautils/xz-%(version)s.tar.bz2'
 
     files_bins = ['xz']
 
diff --git a/recipes/build-tools/yasm.recipe b/recipes/build-tools/yasm.recipe
index 319753b1..d87eec68 100644
--- a/recipes/build-tools/yasm.recipe
+++ b/recipes/build-tools/yasm.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '1.3.0'
     licenses = [License.GPLv3]
     stype = SourceType.TARBALL
-    url = 'http://www.tortall.net/projects/yasm/releases/yasm-1.3.0.tar.gz'
+    url = 'https://www.tortall.net/projects/yasm/releases/yasm-%(version)s.tar.gz'
 
     files_bins = ['yasm']
 
diff --git a/recipes/bzip2.recipe b/recipes/bzip2.recipe
index cd56a6c0..a346861f 100644
--- a/recipes/bzip2.recipe
+++ b/recipes/bzip2.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '1.0.6'
     licenses = [License.BSD_like]
     stype = SourceType.TARBALL
-    url = 'http://bzip.org/%(version)s/bzip2-%(version)s.tar.gz'
+    url = 'https://bzip.org/%(version)s/bzip2-%(version)s.tar.gz'
     patches = ['bzip2/0001-Fix-Makefiles-and-add-support-for-Windows-and-OS-X.patch']
 
     files_libs = ['libbz2']
diff --git a/recipes/cairo.recipe b/recipes/cairo.recipe
index 753d73b2..70e96120 100644
--- a/recipes/cairo.recipe
+++ b/recipes/cairo.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'cairo'
     version = '1.14.12'
     stype = SourceType.TARBALL
-    url = 'http://cairographics.org/releases/cairo-%(version)s.tar.xz'
+    url = 'https://cairographics.org/releases/cairo-%(version)s.tar.xz'
     # either LGPLv2.1 or MPLv1.1
     licenses = [License.LGPLv2_1]
     autoreconf = True
diff --git a/recipes/cdparanoia.recipe b/recipes/cdparanoia.recipe
index 5570651b..1731c987 100644
--- a/recipes/cdparanoia.recipe
+++ b/recipes/cdparanoia.recipe
@@ -11,7 +11,7 @@ class Recipe(recipe.Recipe):
     name = 'cdparanoia'
     version = '10.2'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/%(name)s/%(name)s-III-%(version)s.src.tgz'
+    url = 'https://downloads.xiph.org/releases/%(name)s/%(name)s-III-%(version)s.src.tgz'
     tarball_dirname = '%(name)s-III-%(version)s'
     autoreconf = True
     # binaries are GPL
diff --git a/recipes/docbook-xml.recipe b/recipes/docbook-xml.recipe
index a375f3da..45e5c045 100644
--- a/recipes/docbook-xml.recipe
+++ b/recipes/docbook-xml.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     licenses = []
     btype = BuildType.CUSTOM
     stype = SourceType.TARBALL
-    url = 'http://docbook.org/xml/%(version)s/%(name)s-%(version)s.zip'
+    url = 'https://docbook.org/xml/%(version)s/%(name)s-%(version)s.zip'
 
     files_catalog = ['etc/catalog.xml']
 
diff --git a/recipes/docbook-xsl.recipe b/recipes/docbook-xsl.recipe
index 2ce9c661..235631b9 100644
--- a/recipes/docbook-xsl.recipe
+++ b/recipes/docbook-xsl.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     licenses = [License.BSD_like]
     btype = BuildType.CUSTOM
     stype = SourceType.TARBALL
-    url = 'http://sourceforge.net/projects/docbook/files/%(name)s/%(version)s/%(name)s-%(version)s.tar.bz2'
+    url = 'https://download.sourceforge.net/docbook/%(name)s-%(version)s.tar.bz2'
 
     files_catalog = ['etc/catalog.xml']
 
diff --git a/recipes/flac.recipe b/recipes/flac.recipe
index 089110ca..94087efb 100644
--- a/recipes/flac.recipe
+++ b/recipes/flac.recipe
@@ -8,7 +8,7 @@ class Recipe(recipe.Recipe):
     # only libraries are Xiph.org (aka BSD-like), tools are GPLv2+ and defined below
     licenses = [License.BSD_like]
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/flac/flac-%(version)s.tar.xz'
+    url = 'https://downloads.xiph.org/releases/flac/flac-%(version)s.tar.xz'
     deps = ['libogg']
     configure_options = ' --disable-cpplibs --enable-static'
 
diff --git a/recipes/fontconfig.recipe b/recipes/fontconfig.recipe
index 79210dad..09f31e7e 100644
--- a/recipes/fontconfig.recipe
+++ b/recipes/fontconfig.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     name = 'fontconfig'
     version = '2.12.6'
     stype = SourceType.TARBALL
-    url = 'http://www.freedesktop.org/software/fontconfig/release/fontconfig-%(version)s.tar.gz'
+    url = 'https://www.freedesktop.org/software/fontconfig/release/fontconfig-%(version)s.tar.gz'
     licenses = [License.MIT]
     configure_options = '--disable-docs'
     deps = ['expat', 'freetype', 'zlib', 'bzip2']
diff --git a/recipes/freetype.recipe b/recipes/freetype.recipe
index c0e3b055..7cb1b32a 100644
--- a/recipes/freetype.recipe
+++ b/recipes/freetype.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'freetype'
     version = '2.9'
     stype = SourceType.TARBALL
-    url = 'http://download.savannah.gnu.org/releases/freetype/freetype-%(version)s.tar.bz2'
+    url = 'https://download.savannah.gnu.org/releases/freetype/freetype-%(version)s.tar.bz2'
     licenses = [License.FreeType]
     configure_tpl = "%(config-sh)s --prefix=%(prefix)s --libdir=%(libdir)s --with-harfbuzz=no"
     deps = ['zlib', 'bzip2', 'libpng']
diff --git a/recipes/freior-plugins.recipe b/recipes/freior-plugins.recipe
index 91fd97b4..0819312c 100644
--- a/recipes/freior-plugins.recipe
+++ b/recipes/freior-plugins.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '1.5.0'
     licenses = [License.LGPL]
     stype = SourceType.TARBALL
-    url = 'http://files.dyne.org/frei0r/releases/%(name)s-%(version)s.tar.gz'
+    url = 'https://files.dyne.org/frei0r/releases/%(name)s-%(version)s.tar.gz'
     autoreconf = True
     patches = ['frei0r-plugins/0001-Fix-autoreconf.patch']
 
diff --git a/recipes/gettext.recipe b/recipes/gettext.recipe
index 3a97abfc..5ff0427a 100644
--- a/recipes/gettext.recipe
+++ b/recipes/gettext.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     # only libraries are LGPLv2+, tools are GPLv3+ and defined below
     licenses = [License.LGPLv2Plus]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/pub/gnu/%(name)s/%(name)s-%(version)s.tar.gz'
+    url = 'https://ftp.gnu.org/pub/gnu/%(name)s/%(name)s-%(version)s.tar.gz'
     srcdir = 'gettext-runtime'
     patches = ['gettext/0001-Fix-linker-error-redefinition-of-vasprintf.patch',
                'gettext/0001-Undefine-__USE_MINGW_ANSI_STDIO-as-otherwise-stdio.h.patch',
diff --git a/recipes/glib.recipe b/recipes/glib.recipe
index faecac90..e4009e02 100644
--- a/recipes/glib.recipe
+++ b/recipes/glib.recipe
@@ -24,7 +24,8 @@ class Recipe(recipe.Recipe):
     name = 'glib'
     version = '2.56.1'
     stype = SourceType.TARBALL
-    url = 'http://ftp.acc.umu.se/pub/GNOME/sources/glib/2.56/glib-%(version)s.tar.xz'
+    maj_ver = '.'.join(version.split('.')[0:2])
+    url = 'https://download.gnome.org/sources/{0}/{1}/{0}-{2}.tar.xz'.format(name, maj_ver, version)
     licenses = [License.LGPLv2Plus]
     btype = BuildType.MESON
     meson_options = {'gtk_doc': 'false', 'internal_pcre': 'true', 'libmount': 'false',
diff --git a/recipes/gmp.recipe b/recipes/gmp.recipe
index 067a65a9..aa9cf156 100644
--- a/recipes/gmp.recipe
+++ b/recipes/gmp.recipe
@@ -20,7 +20,7 @@ GMP_H_UNVERSAL='''\
 class Recipe(recipe.Recipe):
     name = 'gmp'
     version = '6.1.2'
-    url = 'http://ftp.gnu.org/gnu/gmp/gmp-%(version)s.tar.xz'
+    url = 'https://ftp.gnu.org/gnu/gmp/gmp-%(version)s.tar.xz'
     stype = SourceType.TARBALL
     licenses = [License.LGPLv3Plus]
     tarball_dirname = 'gmp-6.1.2'
diff --git a/recipes/gtk-doc-lite.recipe b/recipes/gtk-doc-lite.recipe
index 8d3e1790..0a302331 100644
--- a/recipes/gtk-doc-lite.recipe
+++ b/recipes/gtk-doc-lite.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     version = '1.27'
     stype = SourceType.TARBALL
     tarball_dirname = 'gtk-doc-%(version)s'
-    # url = 'http://ftp.acc.umu.se/pub/GNOME/sources/gtk-doc/%(version)s/gtk-doc-%(version)s.tar.xz'
+    # url = 'https://ftp.acc.umu.se/pub/GNOME/sources/gtk-doc/%(version)s/gtk-doc-%(version)s.tar.xz'
     # !!! gtk-doc 1.27 doesn't unpack on MingW, because the uid of the packager is out of range 1..65535
     # So mirror our own re-tarballed version.
     # See https://bugzilla.gnome.org/show_bug.cgi?id=722621
diff --git a/recipes/harfbuzz.recipe b/recipes/harfbuzz.recipe
index 71b7dc17..40705444 100644
--- a/recipes/harfbuzz.recipe
+++ b/recipes/harfbuzz.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'harfbuzz'
     version = '1.7.5'
     stype = SourceType.TARBALL
-    url = 'http://www.freedesktop.org/software/harfbuzz/release/harfbuzz-%(version)s.tar.bz2'
+    url = 'https://www.freedesktop.org/software/%(name)s/release/%(name)s-%(version)s.tar.bz2'
     licenses = [License.LGPLv2Plus]
     deps = ['fontconfig', 'cairo', 'glib']
     configure_options = "--enable-static --with-icu=no"
diff --git a/recipes/ladspa.recipe b/recipes/ladspa.recipe
index 2ad9745f..df13f1bc 100644
--- a/recipes/ladspa.recipe
+++ b/recipes/ladspa.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     licenses = [License.LGPLv2_1]
     btype = BuildType.CUSTOM
     stype = SourceType.TARBALL
-    url = 'http://www.ladspa.org/download/ladspa_sdk_%(version)s.tgz'
+    url = 'https://www.ladspa.org/download/ladspa_sdk_%(version)s.tgz'
     tarball_dirname = 'ladspa_sdk'
 
     files_devel = ['include/ladspa.h']
diff --git a/recipes/lame.recipe b/recipes/lame.recipe
index 572881b2..4ba78a5e 100644
--- a/recipes/lame.recipe
+++ b/recipes/lame.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     licenses = [License.GPL]
     stype = SourceType.TARBALL
     configure_options = ' --enable-static --disable-frontend --disable-decoder'
-    url = 'http://downloads.sourceforge.net/project/lame/lame/%(version)s/lame-%(version)s.tar.gz'
+    url = 'https://downloads.sourceforge.net/lame/lame-%(version)s.tar.gz'
     autoreconf = True
     patches = ['lame/0001-Remove-decoder-symbols.patch']
 
diff --git a/recipes/libdca.recipe b/recipes/libdca.recipe
index 6e8c680a..3f870744 100644
--- a/recipes/libdca.recipe
+++ b/recipes/libdca.recipe
@@ -4,7 +4,7 @@ class Recipe(recipe.Recipe):
     name = 'libdca'
     version = '0.0.5'
     stype = SourceType.TARBALL
-    url = 'http://download.videolan.org/pub/videolan/libdca/%(version)s/libdca-%(version)s.tar.bz2'
+    url = 'https://download.videolan.org/pub/videolan/libdca/%(version)s/libdca-%(version)s.tar.bz2'
     licenses = [License.GPL]
     patches = ['libdca/0001-Disable-AC_C_ALWAYS_INLINE.patch']
     autoreconf = True
diff --git a/recipes/libdv.recipe b/recipes/libdv.recipe
index e3d523f2..f15ec7b6 100644
--- a/recipes/libdv.recipe
+++ b/recipes/libdv.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libdv'
     version = '1.0.0'
     stype = SourceType.TARBALL
-    url = 'http://sourceforge.net/projects/libdv/files/libdv/%(version)s/libdv-%(version)s.tar.gz'
+    url = 'https://download.sourceforge.net/libdv/libdv-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus]
     autoreconf = True
     patches = ['libdv/0001-Check-properly-for-sched_setscheduler.patch',
diff --git a/recipes/libdvdnav.recipe b/recipes/libdvdnav.recipe
index 5b98dfad..d4c6ada0 100644
--- a/recipes/libdvdnav.recipe
+++ b/recipes/libdvdnav.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libdvdnav'
     version = '5.0.1'
     stype = SourceType.TARBALL
-    url = 'http://www.videolan.org/pub/videolan/libdvdnav/%(version)s/libdvdnav-%(version)s.tar.bz2'
+    url = 'https://www.videolan.org/pub/videolan/libdvdnav/%(version)s/libdvdnav-%(version)s.tar.bz2'
     licenses = [License.GPLv2Plus]
     autoreconf = True
     deps = ['libdvdread']
diff --git a/recipes/libdvdread.recipe b/recipes/libdvdread.recipe
index 2dcd3af1..37be0908 100644
--- a/recipes/libdvdread.recipe
+++ b/recipes/libdvdread.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libdvdread'
     version = '5.0.0'
     stype = SourceType.TARBALL
-    url = 'http://www.videolan.org/pub/videolan/libdvdread/%(version)s/libdvdread-%(version)s.tar.bz2'
+    url = 'https://www.videolan.org/pub/videolan/libdvdread/%(version)s/libdvdread-%(version)s.tar.bz2'
     licenses = [License.GPLv2Plus]
     autoreconf = True
     patches = ['libdvdread/0001-Fix-compilation-on-Windows-by-including-files-with-t.patch',
diff --git a/recipes/libiconv.recipe b/recipes/libiconv.recipe
index 96ceece0..f4250960 100644
--- a/recipes/libiconv.recipe
+++ b/recipes/libiconv.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     # only libraries are LGPLv2+, tools are GPLv3+ and defined below
     licenses = [License.LGPLv2Plus]
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/pub/gnu/libiconv/libiconv-%(version)s.tar.gz'
+    url = 'https://ftp.gnu.org/pub/gnu/libiconv/libiconv-%(version)s.tar.gz'
     patches = ['libiconv/0001-Use-correct-autotools-versions.patch',
                'libiconv/0002-lib-Only-rename-locale_charset-for-libiconv-not-libc.patch',]
 #               'libiconv/0002-Add-support-for-Android.patch',
diff --git a/recipes/libjpeg-turbo.recipe b/recipes/libjpeg-turbo.recipe
index ff639354..bcb123cb 100644
--- a/recipes/libjpeg-turbo.recipe
+++ b/recipes/libjpeg-turbo.recipe
@@ -10,7 +10,7 @@ class Recipe(recipe.Recipe):
                     "--libdir=%(libdir)s"
     configure_options = " --with-jpeg8"
     autoreconf = True
-    url = 'http://downloads.sourceforge.net/project/libjpeg-turbo/%(version)s/libjpeg-turbo-%(version)s.tar.gz'
+    url = 'https://downloads.sourceforge.net/libjpeg-turbo/libjpeg-turbo-%(version)s.tar.gz'
     patches = []
 
     files_libs = ['libjpeg','libturbojpeg']
diff --git a/recipes/libkate.recipe b/recipes/libkate.recipe
index 04e1d043..45f506aa 100644
--- a/recipes/libkate.recipe
+++ b/recipes/libkate.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libkate'
     version = '0.4.1'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/kate/libkate-%(version)s.tar.gz'
+    url = 'https://downloads.xiph.org/releases/kate/libkate-%(version)s.tar.gz'
     licenses = [License.BSD_like]
     deps = ['libogg', 'libpng']
     patches = ['libkate/0001-be-more-permissive-with-automake-errors-now-that-we-.patch']
diff --git a/recipes/libmms.recipe b/recipes/libmms.recipe
index 166003d2..b7cf9840 100644
--- a/recipes/libmms.recipe
+++ b/recipes/libmms.recipe
@@ -4,7 +4,7 @@ class Recipe(recipe.Recipe):
     name = 'libmms'
     version = '0.6.4'
     stype = SourceType.TARBALL
-    url = 'http://sourceforge.net/projects/libmms/files/libmms/%(version)s/libmms-%(version)s.tar.gz'
+    url = 'https://download.sourceforge.net/libmms/libmms-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus]
     patches = ['libmms/0002-uri-Add-implementation-of-strndup-for-platforms-that.patch',
                'libmms/0005-Fix-build-on-OSX-leopard.patch']
diff --git a/recipes/libnice.recipe b/recipes/libnice.recipe
index 399aff45..9c416fa5 100644
--- a/recipes/libnice.recipe
+++ b/recipes/libnice.recipe
@@ -4,7 +4,7 @@ class Recipe(recipe.Recipe):
     name = 'libnice'
     version = '0.1.14'
     stype = SourceType.TARBALL
-    url = 'http://nice.freedesktop.org/releases/%(name)s-%(version)s.tar.gz'
+    url = 'https://nice.freedesktop.org/releases/%(name)s-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus, License.MPLv1_1]
     configure_options = '--enable-static --enable-static-plugins --enable-shared \
             --with-gstreamer --without-gstreamer-0.10 \
diff --git a/recipes/libogg.recipe b/recipes/libogg.recipe
index 91876bb0..4ee56431 100644
--- a/recipes/libogg.recipe
+++ b/recipes/libogg.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     name = 'libogg'
     version = '1.3.3'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/ogg/libogg-%(version)s.tar.xz'
+    url = 'https://downloads.xiph.org/releases/ogg/libogg-%(version)s.tar.xz'
     licenses = [License.BSD_like]
     autoreconf = True
     patches = ['libogg/0001-Fix-iOS-build.patch']
diff --git a/recipes/libpng/libpng.recipe b/recipes/libpng/libpng.recipe
index 215d3194..5484eb6a 100644
--- a/recipes/libpng/libpng.recipe
+++ b/recipes/libpng/libpng.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libpng'
     version = '1.6.34'
     stype = SourceType.TARBALL
-    url = 'http://download.sourceforge.net/libpng/libpng-%(version)s.tar.xz'
+    url = 'https://download.sourceforge.net/libpng/libpng-%(version)s.tar.xz'
     licenses = [License.LibPNG]
     deps = ['zlib']
     patches = ['0001-neon-fix-function-export-names-for-iOS-armv7.patch']
diff --git a/recipes/librsvg.recipe b/recipes/librsvg.recipe
index aad74ba8..f1b936c3 100644
--- a/recipes/librsvg.recipe
+++ b/recipes/librsvg.recipe
@@ -8,7 +8,8 @@ class Recipe(recipe.Recipe):
     autoreconf = True
     autoreconf_sh = 'mkdir -p m4 && autoreconf -fiv'
     stype = SourceType.TARBALL
-    url = 'http://ftp.acc.umu.se/pub/GNOME/sources/librsvg/2.40/librsvg-%(version)s.tar.xz'
+    maj_ver = '.'.join(version.split('.')[0:2])
+    url = 'https://download.gnome.org/sources/{0}/{1}/{0}-{2}.tar.xz'.format(name, maj_ver, version)
 
     files_libs = ['librsvg-2']
     files_bins = ['rsvg-convert']
diff --git a/recipes/libshout.recipe b/recipes/libshout.recipe
index 9f410851..5dabf36b 100644
--- a/recipes/libshout.recipe
+++ b/recipes/libshout.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libshout'
     version = '2.4.1'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/libshout/libshout-%(version)s.tar.gz'
+    url = 'https://downloads.xiph.org/releases/libshout/libshout-%(version)s.tar.gz'
     licenses = [License.LGPLv2Plus]
     deps = ['libtheora', 'libogg', 'libvorbis', 'speex']
 
diff --git a/recipes/libtasn1.recipe b/recipes/libtasn1.recipe
index ae561dc5..6c1827e7 100644
--- a/recipes/libtasn1.recipe
+++ b/recipes/libtasn1.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     name = 'libtasn1'
     version = '4.13'
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/libtasn1/libtasn1-{0}.tar.gz'.format(version)
+    url = 'https://ftp.gnu.org/gnu/libtasn1/libtasn1-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus]
     autoreconf = True
     patches = ['libtasn1/0001-Rename-gnulib-symbols.patch']
diff --git a/recipes/libtheora.recipe b/recipes/libtheora.recipe
index 12a13633..29e98305 100644
--- a/recipes/libtheora.recipe
+++ b/recipes/libtheora.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '1.1.1'
     licenses = [License.BSD]
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/theora/libtheora-%(version)s.tar.bz2'
+    url = 'https://downloads.xiph.org/releases/theora/libtheora-%(version)s.tar.bz2'
     deps = ['libogg', 'libvorbis']
     allow_parallel_build = False
     patches = ['libtheora/0001-Add-option-to-disable-doc.patch',
diff --git a/recipes/libunwind.recipe b/recipes/libunwind.recipe
index 22f2c02e..d2b56d79 100644
--- a/recipes/libunwind.recipe
+++ b/recipes/libunwind.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     version = '1.1'
     licenses = [License.MIT]
     stype = SourceType.TARBALL
-    url = 'http://download.savannah.gnu.org/releases/libunwind/libunwind-%(version)s.tar.gz'
+    url = 'https://download.savannah.gnu.org/releases/libunwind/libunwind-%(version)s.tar.gz'
 
     files_libs = ['libunwind']
     files_devel = ['include/libunwind-*.h',
diff --git a/recipes/libvisual.recipe b/recipes/libvisual.recipe
index b56af54b..02b26804 100644
--- a/recipes/libvisual.recipe
+++ b/recipes/libvisual.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libvisual'
     version = '0.4.0'
     stype = SourceType.TARBALL
-    url = 'http://sourceforge.net/projects/libvisual/files/libvisual/libvisual-%(version)s/libvisual-%(version)s.tar.bz2'
+    url = 'https://download.sourceforge.net/libvisual/libvisual-%(version)s.tar.bz2'
     licenses = [License.LGPLv2_1Plus]
     autoreconf = True
     configure_options = ' --enable-static'
diff --git a/recipes/libvorbis.recipe b/recipes/libvorbis.recipe
index af710dde..81987235 100644
--- a/recipes/libvorbis.recipe
+++ b/recipes/libvorbis.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     name = 'libvorbis'
     version = '1.3.5'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/vorbis/libvorbis-%(version)s.tar.xz'
+    url = 'https://downloads.xiph.org/releases/vorbis/libvorbis-%(version)s.tar.xz'
     licenses = [License.BSD_like]
     deps = ['libogg']
     config_sh = 'rm ltmain.sh && sh autogen.sh'
diff --git a/recipes/libxml2.recipe b/recipes/libxml2.recipe
index 56d9fc0c..dae0f3e8 100644
--- a/recipes/libxml2.recipe
+++ b/recipes/libxml2.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'libxml2'
     version = '2.9.7'
     stype = SourceType.TARBALL
-    url = 'http://xmlsoft.org/sources/libxml2-%(version)s.tar.gz'
+    url = 'https://xmlsoft.org/sources/libxml2-%(version)s.tar.gz'
     licenses = [License.MIT]
     deps = [ 'zlib' ]
     autoreconf = True
diff --git a/recipes/mpg123.recipe b/recipes/mpg123.recipe
index 909293d0..71f998cb 100644
--- a/recipes/mpg123.recipe
+++ b/recipes/mpg123.recipe
@@ -4,7 +4,7 @@ class Recipe(recipe.Recipe):
     name = 'mpg123'
     version = '1.25.10'
     stype = SourceType.TARBALL
-    url = 'http://downloads.sourceforge.net/project/mpg123/mpg123/%(version)s/mpg123-%(version)s.tar.bz2'
+    url = 'https://downloads.sourceforge.net/mpg123/mpg123-%(version)s.tar.bz2'
     licenses = [License.LGPLv2_1]
     autoreconf = True
     configure_options = '--with-audio=dummy --enable-static'
diff --git a/recipes/nettle/nettle.recipe b/recipes/nettle/nettle.recipe
index 3bf06136..54d903a1 100644
--- a/recipes/nettle/nettle.recipe
+++ b/recipes/nettle/nettle.recipe
@@ -12,7 +12,7 @@ class Recipe(recipe.Recipe):
     name = 'nettle'
     version = '3.4'
     stype = SourceType.TARBALL
-    url = 'http://ftp.gnu.org/gnu/{0}/{0}-{1}.tar.gz'.format(name, version)
+    url = 'https://ftp.gnu.org/gnu/nettle/nettle-%(version)s.tar.gz'
 
     licenses = [License.LGPLv2_1Plus]
     configure_options = '--enable-shared --enable-public-key'
diff --git a/recipes/opencore-amr.recipe b/recipes/opencore-amr.recipe
index b80694db..24a0600f 100644
--- a/recipes/opencore-amr.recipe
+++ b/recipes/opencore-amr.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'opencore-amr'
     version = '0.1.5'
     stype = SourceType.TARBALL
-    url = 'http://sourceforge.net/projects/opencore-amr/files/opencore-amr/opencore-amr-%(version)s.tar.gz'
+    url = 'https://download.sourceforge.net/opencore-amr/opencore-amr-%(version)s.tar.gz'
     licenses = [License.Apachev2]
     patches = ['opencore-amr/0001-Fix-include-dir-in-pc-files.patch']
 
diff --git a/recipes/opus.recipe b/recipes/opus.recipe
index 36b3d97a..40fa79ab 100644
--- a/recipes/opus.recipe
+++ b/recipes/opus.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '1.2.1'
     licenses = [License.BSD_like]
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/{0}/{0}-{1}.tar.gz'.format(name, version)
+    url = 'https://downloads.xiph.org/releases/{0}/{0}-{1}.tar.gz'.format(name, version)
 
     files_libs = ['libopus']
     files_devel = ['include/opus', 'lib/pkgconfig/opus.pc']
diff --git a/recipes/pango.recipe b/recipes/pango.recipe
index 2cd6b635..b04620c0 100644
--- a/recipes/pango.recipe
+++ b/recipes/pango.recipe
@@ -5,7 +5,8 @@ class Recipe(recipe.Recipe):
     name = 'pango'
     version = '1.40.14'
     stype = SourceType.TARBALL
-    url = 'http://ftp.acc.umu.se/pub/GNOME/sources/pango/1.40/pango-%(version)s.tar.xz'
+    maj_ver = '.'.join(version.split('.')[0:2])
+    url = 'https://download.gnome.org/sources/{0}/{1}/{0}-{2}.tar.xz'.format(name, maj_ver, version)
     autoreconf = True
     autoreconf_sh = 'ACLOCAL="$ACLOCAL $ACLOCAL_FLAGS" autoreconf -ivf '
     licenses = [License.LGPLv2Plus]
diff --git a/recipes/pixman.recipe b/recipes/pixman.recipe
index 9459d64d..004e3fc7 100644
--- a/recipes/pixman.recipe
+++ b/recipes/pixman.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     name = 'pixman'
     version = '0.34.0'
     stype = SourceType.TARBALL
-    url = 'http://cairographics.org/releases/pixman-%(version)s.tar.gz'
+    url = 'https://cairographics.org/releases/pixman-%(version)s.tar.gz'
     licenses = [License.MIT]
     autoreconf = True
     patches = ['pixman/0001-Fix-build-on-Android.patch',
diff --git a/recipes/sbc.recipe b/recipes/sbc.recipe
index fcd7c18e..488819b3 100644
--- a/recipes/sbc.recipe
+++ b/recipes/sbc.recipe
@@ -4,7 +4,7 @@ class Recipe(recipe.Recipe):
     name = 'sbc'
     version = '1.3'
     stype = SourceType.TARBALL
-    url = 'http://www.kernel.org/pub/linux/bluetooth/sbc-%(version)s.tar.gz'
+    url = 'https://www.kernel.org/pub/linux/bluetooth/sbc-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus]
     files_libs = ['libsbc']
     files_devel = ['include/sbc/sbc.h', 'lib/pkgconfig/sbc.pc']
diff --git a/recipes/soundtouch.recipe b/recipes/soundtouch.recipe
index 369c26f2..6d49c15d 100644
--- a/recipes/soundtouch.recipe
+++ b/recipes/soundtouch.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     name = 'soundtouch'
     version = '1.9.2'
     stype = SourceType.TARBALL
-    url = 'http://www.surina.net/soundtouch/soundtouch-%(version)s.tar.gz'
+    url = 'https://www.surina.net/soundtouch/soundtouch-%(version)s.tar.gz'
     tarball_dirname = 'soundtouch'
     licenses = [License.LGPLv2_1Plus]
     autoreconf_sh = './bootstrap'
diff --git a/recipes/spandsp.recipe b/recipes/spandsp.recipe
index 9c04afc4..11f4d486 100644
--- a/recipes/spandsp.recipe
+++ b/recipes/spandsp.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'spandsp'
     version = '0.0.6'
     stype = SourceType.TARBALL
-    url = 'http://www.soft-switch.org/downloads/spandsp/spandsp-%(version)s.tar.gz'
+    url = 'https://www.soft-switch.org/downloads/spandsp/spandsp-%(version)s.tar.gz'
     licenses = [License.LGPLv2_1Plus]
     deps = ['tiff']
     allow_parallel_build = False
diff --git a/recipes/speex.recipe b/recipes/speex.recipe
index abaa5ce5..8dd40818 100644
--- a/recipes/speex.recipe
+++ b/recipes/speex.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'speex'
     version = '1.2rc2'
     stype = SourceType.TARBALL
-    url = 'http://downloads.xiph.org/releases/speex/speex-%(version)s.tar.gz'
+    url = 'https://downloads.xiph.org/releases/speex/speex-%(version)s.tar.gz'
     licenses = [License.BSD_like]
     deps = ['libogg']
     allow_parallel_build = False
diff --git a/recipes/taglib.recipe b/recipes/taglib.recipe
index 4b912bfb..552eb55d 100644
--- a/recipes/taglib.recipe
+++ b/recipes/taglib.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     name = 'taglib'
     version = '1.11.1'
     stype = SourceType.TARBALL
-    url = 'http://{0}.org/releases/{0}-{1}.tar.gz'.format(name, version)
+    url = 'https://taglib.org/releases/taglib-%(version)s.tar.gz'
     # either LGPLv2.1 or MPLv1.1
     licenses = [License.LGPLv2_1]
     configure_options = '-DWITH_MP4=ON -DWITH_ASF=ON -DBUILD_SHARED_LIBS=1 -DBUILD_STATIC_LIBS=1 -DCMAKE_DISABLE_FIND_PACKAGE_Boost=TRUE'
diff --git a/recipes/tiff.recipe b/recipes/tiff.recipe
index fb72c855..b7947e77 100644
--- a/recipes/tiff.recipe
+++ b/recipes/tiff.recipe
@@ -5,7 +5,7 @@ class Recipe(recipe.Recipe):
     name = 'tiff'
     version = '4.0.9'
     stype = SourceType.TARBALL
-    url = 'http://download.osgeo.org/libtiff/tiff-%(version)s.tar.gz'
+    url = 'https://download.osgeo.org/libtiff/tiff-%(version)s.tar.gz'
     licenses = [License.BSD_like]
     deps = [ 'zlib', 'libjpeg-turbo' ]
     configure_options = ' --disable-cxx no_gl=yes'
diff --git a/recipes/toolchain/cloog.recipe b/recipes/toolchain/cloog.recipe
index 5bf39c6f..302a09f2 100644
--- a/recipes/toolchain/cloog.recipe
+++ b/recipes/toolchain/cloog.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '0.18.0'
     licenses = [License.GPLv2]
     stype = SourceType.TARBALL
-    url = 'http://ftp.mirrorservice.org/sites/sourceware.org/pub/gcc/infrastructure/cloog-0.18.0.tar.gz'
+    url = 'https://gcc.gnu.org/pub/gcc/infrastructure/cloog-0.18.0.tar.gz'
     configure_options = '--with-bits=gmp ' \
                         '--disable-shared ' \
                         '--enable-static'
diff --git a/recipes/vo-aacenc.recipe b/recipes/vo-aacenc.recipe
index 8ce89c48..2ce79e0a 100644
--- a/recipes/vo-aacenc.recipe
+++ b/recipes/vo-aacenc.recipe
@@ -6,7 +6,7 @@ class Recipe(recipe.Recipe):
     version = '0.1.3'
     licenses = [License.Apachev2]
     stype = SourceType.TARBALL
-    url = 'http://downloads.sourceforge.net/project/opencore-amr/vo-aacenc/vo-aacenc-%(version)s.tar.gz'
+    url = 'https://downloads.sourceforge.net/opencore-amr/vo-aacenc-%(version)s.tar.gz'
     autoreconf = True
 
     files_libs = ['libvo-aacenc']
diff --git a/recipes/webrtc-audio-processing.recipe b/recipes/webrtc-audio-processing.recipe
index 0c6e0139..1fe7101d 100644
--- a/recipes/webrtc-audio-processing.recipe
+++ b/recipes/webrtc-audio-processing.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '0.2'
     licenses = [License.BSD_like]
     stype = SourceType.TARBALL
-    url = 'http://freedesktop.org/software/pulseaudio/webrtc-audio-processing/{0}-{1}.tar.xz'.format(name, version)
+    url = 'https://freedesktop.org/software/pulseaudio/%(name)s/%(name)s-%(version)s.tar.xz'
 
     platform_deps = {Platform.ANDROID: ['gnustl']}
 
diff --git a/recipes/x264.recipe b/recipes/x264.recipe
index 748b1d62..a1cad8c8 100644
--- a/recipes/x264.recipe
+++ b/recipes/x264.recipe
@@ -11,7 +11,7 @@ class Recipe(recipe.Recipe):
                     "--libdir=%(libdir)s"
     configure_options = '--enable-shared --enable-static --enable-pic ' \
                         '--disable-strip --disable-lavf'
-    url = 'http://download.videolan.org/pub/x264/snapshots/x264-snapshot-%(version)s-stable.tar.bz2'
+    url = 'https://download.videolan.org/pub/x264/snapshots/x264-snapshot-%(version)s-stable.tar.bz2'
     tarball_dirname= 'x264-snapshot-%(version)s-stable'
 
     files_libs = ['libx264']
diff --git a/recipes/zlib.recipe b/recipes/zlib.recipe
index 6b1dc030..23b8e1b2 100644
--- a/recipes/zlib.recipe
+++ b/recipes/zlib.recipe
@@ -7,7 +7,7 @@ class Recipe(recipe.Recipe):
     version = '1.2.11'
     stype = SourceType.TARBALL
     btype = BuildType.MESON
-    url = 'http://zlib.net/fossils/zlib-%(version)s.tar.gz'
+    url = 'https://zlib.net/fossils/zlib-%(version)s.tar.gz'
     licenses = [License.BSD_like]
     meson_options = {'default-library': 'both'}
     patches = ['zlib/0001-win32-fix-dll-name.patch',