Commit Graph

2611 Commits

Author SHA1 Message Date
Matthew Bauer
1bc7fae62d
Merge pull request #68889 from nspin/pr/various-cross-2
Various cross-compilation fixes
2019-09-17 19:35:44 -04:00
worldofpeace
d6d3ccf8b8 fprintd: Move D-Bus conf file to share/dbus-1/system.d
Since D-Bus 1.9.18 configuration files installed by third-party should
go in share/dbus-1/system.d. The old location is for sysadmin overrides.
2019-09-16 13:59:09 -04:00
Vladimír Čunát
fa4a3af5a7
Merge branch 'master' into staging-next 2019-09-16 19:24:52 +02:00
Will Dietz
769487362f
nsjail: 2.8 -> 2.9 2019-09-16 10:04:09 -05:00
Nick Spinale
e39d627a12 gnupg: fix cross-compilation 2019-09-16 10:48:24 +00:00
Nick Spinale
a6635fbc19 pinentry: fix cross-compilation 2019-09-16 10:48:24 +00:00
Arian van Putten
35e9b2915a vault: 1.2.2 -> 1.2.3
Fixes the build because https://git.apache.org has been taken offline
and now has been replaced with another mirror
2019-09-16 10:49:59 +02:00
Mario Rodas
18eeec914b
Merge pull request #68645 from marsam/update-sops
sops: 3.3.1 -> 3.4.0
2019-09-15 17:49:22 -05:00
Vladimír Čunát
b6c6e1f9e8
Merge branch 'master' into staging-next 2019-09-15 13:18:54 +02:00
Daniel Schaefer
f25e86411c chipsec: 1.4.0 -> 1.4.1 2019-09-13 14:30:58 +02:00
Robin Gloster
63b645f3d8
Merge pull request #67414 from JohnAZoidberg/chipsec-140
chipsec: 1.3.7 -> 1.4.0
2019-09-13 13:20:02 +02:00
Mario Rodas
304aa6f6b6
sops: 3.3.1 -> 3.4.0
Changelog: https://github.com/mozilla/sops/releases/tag/3.4.0
2019-09-13 04:20:00 -05:00
Jan Tojnar
a441eaa7b1
Merge branch 'staging-next' into staging 2019-09-12 22:49:43 +02:00
Peter Hoeg
6759d15465
Merge pull request #68512 from nspin/pr/stdenv-spelling
stdenv: fix misspellings of dontPatchELF
2019-09-12 17:04:49 +08:00
Jason Carr
7644e88334 lesspass: fix src 2019-09-11 23:16:36 -04:00
Nick Spinale
d2333beb86 stdenv: fix misspellings of dontPatchELF 2019-09-11 13:10:09 +00:00
Jan Tojnar
1716d62f63
Merge branch 'staging-next' into staging 2019-09-10 07:06:45 +02:00
Jan Tojnar
8752ff2254
zbar: clean up (#68389)
zbar: clean up
2019-09-10 06:57:40 +02:00
Jan Tojnar
e1cb839d17
zbar: Split to multiple outputs
Also fix D-Bus config dir path: The configure script is appending `/dbus-1/system.d`
so when we added passed in `$out/etc/dbus-1/system.d`, it ended up with extra nesting.
2019-09-10 01:34:50 +02:00
Izorkin
329a88efa7 treewide: replace mysql.connector-c to libmysqlclient 2019-09-09 15:55:34 +03:00
volth
7b8fb5c06c treewide: remove redundant quotes 2019-09-08 23:38:31 +00:00
Frederik Rietdijk
5f4734b1dd Merge remote-tracking branch 'upstream/gcc-8' into staging-next
Earlier the gcc8 branch was merged instead of the gcc-8 branch (note the dash)...
2019-09-08 20:44:26 +02:00
Maximilian Bosch
4f67ff34d5
Merge pull request #68281 from doronbehar/update-sequoia
sequoia: 0.9.0 -> 0.10.0
2019-09-08 12:38:56 +02:00
Jan Tojnar
98d9589819
gnome-keysign: init at 1.0.1 (#57000)
gnome-keysign: init at 1.0.1
2019-09-08 03:44:11 +02:00
Doron Behar
176395f0f4 sequoia: 0.9.0 -> 0.10.0 2019-09-07 20:36:02 +03:00
Frederik Rietdijk
66bc7fc1b3 Merge master into staging-next 2019-09-06 22:46:05 +02:00
Frederik Rietdijk
9b92496429
Merge pull request #68194 from adisbladis/drop-go-1_10
Drop unsupported go version 1.10
2019-09-06 19:14:02 +02:00
Jan Tojnar
cdf426488b
Merge branch 'master' into staging-next
Fixed trivial conflicts caused by removing rec.
2019-09-06 03:20:09 +02:00
Jan Tojnar
ed54a5b51d
Merge branch 'gtk-no-plus' 2019-09-06 02:57:51 +02:00
Jan Tojnar
72e7d569a7
tree-wide: s/GTK+/GTK/g
GTK was renamed.
2019-09-06 02:54:53 +02:00
adisbladis
4bca8b48fb
notary: Build with go 1.12 2019-09-05 22:33:40 +01:00
Sean Buckley
7d7d9e57f8 metasploit: 4.16.1 -> 5.0.45 2019-09-04 20:44:50 -04:00
Vladimír Čunát
4aad2947f8
Merge branch 'master' into staging-next 2019-09-04 11:00:56 +02:00
Franz Pletz
de85797565
Merge remote-tracking branch 'origin/master' into gcc-8 2019-09-03 22:15:07 +02:00
worldofpeace
59e68d3b74 treewide: don't use single quotes with placeholder 2019-09-03 13:01:42 -04:00
Jan Tojnar
ad72ce9c2b
gnome-keysign: init at 1.0.1 2019-09-03 18:49:05 +02:00
Frederik Rietdijk
ad1d58c622 Merge staging-next into staging 2019-08-31 10:04:20 +02:00
Frederik Rietdijk
fc74ba8291 Merge master into staging-next 2019-08-31 09:50:38 +02:00
zimbatm
3d0af7848c
Merge pull request #67607 from zimbatm/verifpal-0.2
verifpal: init at 0.2
2019-08-30 21:56:52 +02:00
zimbatm
792bb4f7f6
verifpal: init at 0.2 2019-08-30 21:56:12 +02:00
Jaka Hudoklin
8d1510abfb
Merge pull request #67606 from endocrimes/r-vault-1.2.2
vault: 1.0.2 -> 1.2.2
2019-08-29 07:07:09 +00:00
volth
08f68313a4 treewide: remove redundant rec 2019-08-28 11:07:32 +00:00
Stig Palmquist
2d36aa63fd
ripasso-cursive: init unstable at 2019-08-27 2019-08-28 11:56:04 +02:00
Danielle Lancashire
d95dca26ab
vault: 1.0.2 -> 1.2.2
This upgrades Vault to version 1.2.2. To accomplish this, we migrate to
using the `buildGoModule` helper, as since 1.0.2 the Vault build process
migrated to modules, and does not vendor its dependencies.

We also stop using the vault build script, and gox, as it only really
provides value for local development, where it configures GOOS/GOARCH
and installs into some convenient dev locations.
2019-08-28 09:47:03 +02:00
Frederik Rietdijk
5061fe0c2c Merge staging-next into staging 2019-08-28 08:26:42 +02:00
volth
35d68ef143 treewide: remove redundant quotes 2019-08-26 21:40:19 +00:00
Robin Gloster
616b8343c4
Merge remote-tracking branch 'upstream/master' into gcc-8 2019-08-25 18:55:46 +02:00
Vladimír Čunát
985d1ac425
Merge branch 'master' into staging-next
There were several more conflicts from name -> pname+version;
all auto-solved by kdiff3, hopefully OK.

Hydra nixpkgs: ?compare=1538611
2019-08-25 14:57:11 +02:00
Daniel Schaefer
908ecd5cb7 chipsec: 1.3.7 -> 1.4.0 2019-08-25 00:41:02 +02:00
Vladimír Čunát
2e6bf42a22
Merge branch 'master' into staging-next
There ver very many conflicts, basically all due to
name -> pname+version.  Fortunately, almost everything was auto-resolved
by kdiff3, and for now I just fixed up a couple evaluation problems,
as verified by the tarball job.  There might be some fallback to these
conflicts, but I believe it should be minimal.

Hydra nixpkgs: ?compare=1538299
2019-08-24 08:55:37 +02:00
Andrew Childs
de1e3c9aee nmap: update clang specific patch
The upstream PR had two parts: adding a missing include and resolving
an ambiguous reference. The upstream project fixed the first but not
the second. We still need the second part, so extract it by filtering
the patch.
2019-08-24 13:57:35 +09:00
Vladyslav M
9a2b01ad8c
hcxtools: 5.1.6 -> 5.2.0 2019-08-23 23:14:23 +03:00
Linus Heckemann
d1d602f559 Merge remote-tracking branch 'origin/master' into openssl-1.1 2019-08-23 17:27:39 +02:00
Robin Gloster
47a219d8e7
clamav: 0.101.3 -> 0.101.4 2019-08-23 15:53:07 +02:00
Robin Gloster
c7e75df21f
Merge remote-tracking branch 'upstream/master' into openssl-1.1 2019-08-23 02:00:31 +02:00
worldofpeace
1f3b789ebe
Merge pull request #63753 from jasoncarr0/lesspass
lesspass-cli: init at 9.0.0
2019-08-22 18:47:14 -04:00
Jason Carr
4e4a4461d8 lesspass-cli: init at 9.0.0 2019-08-22 18:31:26 -04:00
Marek Mahut
6f4ab8702f
Merge pull request #67018 from jonafato/keybase-4.3.1
keybase: 4.1.0 -> 4.3.1
2019-08-22 23:24:36 +02:00
Will Dietz
65f5e4512c
tor: 0.4.0.5 -> 0.4.1.5
https://blog.torproject.org/new-release-tor-0415
2019-08-22 13:21:58 -05:00
Robin Gloster
f4fc845e5b
Merge remote-tracking branch 'upstream/master' into openssl-1.1 2019-08-21 14:25:13 +02:00
Robin Gloster
4e60b0efae
treewide: update globin's maintained drvs 2019-08-20 19:36:05 +02:00
Jon Banafato
35022fcd24 keybase-gui: 4.1.0 -> 4.3.1 2019-08-20 00:25:17 -04:00
Jon Banafato
95cc6bb641 keybase: 4.1.0 -> 4.3.1 2019-08-20 00:24:39 -04:00
WilliButz
3a0d0b9a0b
Merge pull request #66997 from r-ryantm/auto-update/nmap
nmap: 7.70 -> 7.80
2019-08-20 03:26:53 +02:00
R. RyanTM
d15de57f66 nmap: 7.70 -> 7.80
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/nmap/versions
2019-08-19 16:56:10 -07:00
Marek Mahut
c03dee386f
Merge pull request #66946 from r-ryantm/auto-update/kpcli
kpcli: 3.2 -> 3.3
2019-08-19 20:49:53 +02:00
R. RyanTM
fb15876d24 kpcli: 3.2 -> 3.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/kpcli/versions
2019-08-19 09:26:01 -07:00
Marek Mahut
8b7821604d
Merge pull request #66863 from r-ryantm/auto-update/clamav
clamav: 0.101.2 -> 0.101.3
2019-08-19 09:14:49 +02:00
R. RyanTM
5b97999823 clamav: 0.101.2 -> 0.101.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/clamav/versions
2019-08-18 21:38:13 -07:00
Marek Mahut
44ba72b546
Merge pull request #66776 from toonn/pass-otp-bump
pass-otp: 1.1.1 -> 1.2.0
2019-08-18 21:56:58 +02:00
toonn
5a035ec45f pass-otp: 1.1.1 -> 1.2.0
Had to specify `BASHCOMPDIR` in `$out` to keep things pure.
2019-08-18 16:34:16 +02:00
Frederik Rietdijk
f65aa21bb2 Merge master into staging-next 2019-08-18 12:53:44 +02:00
R. RyanTM
b30e62409e ccid: 1.4.30 -> 1.4.31
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/ccid/versions
2019-08-17 15:42:03 -07:00
volth
c814d72b51 treewide: name -> pname 2019-08-17 10:54:38 +00:00
volth
46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
worldofpeace
a5b77b8cae
Merge pull request #65724 from doronbehar/improve-sequoia
Improve sequoia package expression
2019-08-13 14:44:35 -04:00
Doron Behar
701c788c3f sequoia: improve expression, rename from sequoia-tool
- Add the package to the pythonPackages' attribute set.

- Make the python support overrideable
  We use the pythonSupport argument.

- Rename sequoia-tool -> sequoia
  We provide the whole ecosystem which includes:
    * ffi bindings to Python and C
    * zsh and bash completion for `sq` and `sqv` executables.

- Meta:
  * Use a string as the homepage URL (plain URLs are deprecated).
  * Change description of package to fit upstream and the files we
    actually install.
  * Add @doronbehar as maintainer.
2019-08-13 14:42:27 -04:00
Marek Mahut
86ac9f55b9
Merge pull request #63600 from steadmon/fail2ban-dovecot-service
fail2ban: fix dovecot filter's journalmatch
2019-08-12 18:51:32 +02:00
worldofpeace
347a5d9275
Merge pull request #65764 from Kiwi/bitwarden
bitwarden: init at 1.15.2
2019-08-07 15:01:44 -04:00
Robert Djubek
2372dc2673
bitwarden: init at 1.15.2 2019-08-07 17:41:34 +00:00
Hugo
83cfaaccf4 gopass: fix build on darwin (#66244) 2019-08-07 10:33:07 +01:00
Jaka Hudoklin
e2cd85d9b4
Merge pull request #65166 from PsyanticY/vault-with-ui
vault-bin: init at 1.1.3
2019-08-04 13:06:28 +02:00
Jaka Hudoklin
558cdf0e11
vault-bin: use sourceRoot instead of custom unpackPhase 2019-08-04 12:20:16 +02:00
Frederik Rietdijk
d20a59d2e5 Merge master into staging-next 2019-08-02 23:27:18 +02:00
worldofpeace
7fb44be46b
Merge pull request #65756 from Kiwi/update-bitwarden-cli
bitwarden-cli: fix build
2019-08-02 17:11:20 -04:00
Robert Djubek
4253edd1fe
bitwarden-cli: fix build
Updated with./generate.sh so that it builds. Fixes #63158
2019-08-02 20:57:25 +00:00
Frederik Rietdijk
6f723b9bad Merge master into staging-next 2019-08-02 09:18:37 +02:00
Robin Gloster
30969073f0
Merge remote-tracking branch 'upstream/master' into openssl-1.1 2019-08-02 03:01:30 +02:00
Robin Gloster
841e20e583
Merge pull request #64336 from adisbladis/nodejs-8x-drop
Drop nodejs-8_x
2019-08-02 00:53:46 +00:00
Robin Gloster
1ac2c6b054
Merge pull request #65732 from addict3d/bump-ghidra-version
ghidra: 9.0.2 -> 9.0.4
2019-08-02 00:47:39 +00:00
adisbladis
9e9c6de50c
nodejs-8_x: Drop package
It will be EOL within the support period of 19.09
2019-08-02 02:34:47 +02:00
adisbladis
1a46901c4e
Merge pull request #65617 from gcv/gnupg1-all-platforms
Allow GnuPG1 to build on all platforms.
2019-08-01 17:48:34 +01:00
Nick Bathum
bad033aaa7 ghidra 9.0.2 -> 9.0.4 2019-08-01 12:07:47 -04:00
Frederik Rietdijk
55e4555b77 Merge master into staging-next 2019-08-01 09:42:54 +02:00
worldofpeace
ba4e5a3f64
Merge pull request #65488 from arcnmx/pr-passff-manifest
passff-host: fix native messaging manifest path
2019-07-31 21:10:45 -04:00
gcv
2a2fcbb274 gnupg: Allow GnuPG1 to build on all platforms. 2019-07-31 09:57:02 -07:00
arcnmx
c73ff37cd5 passff-host: fix native messaging manifest path
Match other native messaging applications
and the firefox wrapper's expectations.
2019-07-31 07:26:30 -07:00
Mario Rodas
4f6bd58866
Merge pull request #65615 from arcnmx/pr-bitwarden_rs-update
bitwarden_rs: 1.9.0 -> 1.9.1
2019-07-31 08:01:57 -05:00
Peter Hoeg
f46b8a9ef2
Merge pull request #65618 from peterhoeg/p/spwgen
pwgen-secure: init at 0.9.1
2019-07-31 15:18:14 +08:00
Peter Hoeg
db5aa011b8 pwgen-secure: init at 0.9.1 2019-07-31 15:16:18 +08:00
arcnmx
fef48df3a1 bitwarden_rs: 1.9.0 -> 1.9.1 2019-07-30 15:03:15 -07:00
arcnmx
242350554c bitwarden_rs-vault: 2.10.1 -> 2.11.0 2019-07-30 14:37:37 -07:00
Andreas Rammhold
78be12d315
tpm-luks: add openssl1.1 patch 2019-07-29 21:25:15 +02:00
Andreas Rammhold
b689d71b9c
tpm-tools: apply openssl1.1 patch 2019-07-29 21:25:15 +02:00
Franz Pletz
c7ffe1778a
chaps: mark as broken due to openssl 1.1 2019-07-29 21:25:12 +02:00
worldofpeace
872b55a8c1
Merge pull request #63655 from minijackson/init-sequoia-tool
sequoia-tool: init at 0.9.0
2019-07-29 03:32:04 -04:00
Frederik Rietdijk
cca5ee9c07 Merge staging-next into staging 2019-07-28 09:10:03 +02:00
Cole Mickens
f0950fa3f6 gopass: v1.8.5 -> v1.8.6; support wayland 2019-07-26 12:01:25 +02:00
PsyanticY
f403684eee vault-bin: init at 1.1.3
This binray contain the UI part of HashiCorp Vault that we were not able to build it due to the need to generate a very big yarn file. #49082
2019-07-25 15:55:14 +01:00
Orivej Desh
32fbbc6f9b Merge master into staging 2019-07-25 09:23:21 +00:00
Thomas Tuegel
b40550232f
pinentry: Use qt5.wrapQtApps as needed 2019-07-24 11:30:47 -05:00
Rene de la Garza
f882547372 ghidra: 9.0 -> 9.0.2 (#65177) 2019-07-24 17:02:03 +01:00
worldofpeace
b1bc0645ea gdk-pixbuf: rename from gdk_pixbuf 2019-07-22 18:50:57 -04:00
Nick Novitski
7136e0d0a6 bundlerUpdateScript: init and use (#64822) 2019-07-22 12:02:47 +00:00
R. RyanTM
abc4ccdd2d shc: 4.0.2 -> 4.0.3
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/shc/versions
2019-07-17 09:37:34 +02:00
Ryan Mulligan
ef26020fff
Merge pull request #64870 from r-ryantm/auto-update/pius
pius: 2.2.7 -> 3.0.0
2019-07-16 18:21:19 -07:00
Kier Davis
5e54487080
pius: perl should be a runtime dependency, not a build-time one
Since 61bc03c017, patch-shebangs
now distinguishes between build-time and runtime dependencies.

Prior to this commit, perl was not being placed in patch-shebangs'
search path when it is run during the fixup phase.
2019-07-16 14:28:49 +01:00
Kier Davis
97ef23794b
pius: use pname+version instead of name 2019-07-16 13:59:38 +01:00
Kier Davis
d914be56a2
pius: dependency on package 'six' is no longer needed 2019-07-16 13:52:41 +01:00
Kier Davis
680ee0a45a
pius: switch to Python 3
pius 3.0.0 requires Python 3.
2019-07-16 13:51:26 +01:00
R. RyanTM
06f3c7a1a3 pius: 2.2.7 -> 3.0.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/pius/versions
2019-07-15 23:47:59 -07:00
Frederik Rietdijk
54065ae20d Merge master into staging-next 2019-07-13 09:45:40 +02:00
Peter Simons
84e3370358
Merge pull request #64538 from dtzWill/update/gnupg-2.2.17
gnupg: 2.2.16 -> 2.2.17
2019-07-11 19:21:58 +02:00
Paul Myjavec
95395fbf54 saml2aws: 2.10.0 -> 2.15.0 2019-07-11 10:39:42 +02:00
Frederik Rietdijk
22cb7f25f2 Merge master into staging-next 2019-07-11 09:40:10 +02:00
Ryan Mulligan
508ae42a0f treewide: fix redirect URLs 2019-07-10 12:52:51 -07:00
Frederik Rietdijk
6049c39bdb keybase: fix eval after merge mistake 2019-07-10 10:30:43 +02:00
Will Dietz
c793a1d422
gnupg: 2.2.16 -> 2.2.17
https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000439.html
2019-07-09 13:18:34 -05:00
Frederik Rietdijk
79a03641d5 Merge staging-next into staging 2019-07-09 15:46:26 +02:00
Frederik Rietdijk
7cf5909fad Merge staging-next into staging 2019-07-09 15:44:08 +02:00
Minijackson
c9fe80a67f
sequoia-tool: init at 0.9.0 2019-07-08 23:46:51 +02:00
worldofpeace
d8bbbeb38a kbfs: update homepage and description 2019-07-06 16:51:00 -04:00
worldofpeace
bfe270bc54 kbfs: 2.11.0 -> 4.1.0
The kbfs code has been moved to the same
repo as the keybase package.
2019-07-06 16:51:00 -04:00
Thomas Tuegel
56d5963382
Merge pull request #54525 from ttuegel/feature/qt-5/wrap-qt-apps
Wrap Qt applications
2019-07-05 14:38:10 -05:00
Thomas Tuegel
51d78034a1
wrapQtAppsHook: Remove ad hoc Qt wrappers 2019-07-05 10:42:08 -05:00
Jonathan Ringer
c5273fae16 keybase-gui: 4.0.0 -> 4.1.0 2019-07-05 14:21:29 +02:00
Jonathan Ringer
62ea7ba41b keybase: 4.0.0 -> 4.1.0 2019-07-05 14:21:29 +02:00
adisbladis
d614edeb32
Revert Nodejs-8_x deprecation
This was supposed to go through a pull request

Revert "nodePackages: Regenerate node packages for nodejs 10 & 12"
This reverts commit 6a17bdf397.

Revert "nodejs-8_x: Drop package"
This reverts commit e06c97b71d.
2019-07-05 12:23:27 +01:00
adisbladis
e06c97b71d
nodejs-8_x: Drop package
It will be EOL within the support period of 19.09
2019-07-05 12:21:42 +01:00
Daiderd Jordan
e7765ba8e5
pinentry-mac: remove cf-private 2019-07-03 22:20:12 +02:00
Daiderd Jordan
41d1294eab
keybase: remove cf-private 2019-07-03 22:20:12 +02:00
Alyssa Ross
4cab72953c
gnupg: vendor SKS patch
This quickly became a 404 upstream.

Fixes https://github.com/NixOS/nixpkgs/64256.
2019-07-03 16:39:28 +00:00
Rok Garbas
65781e204d
Remove me (garbas) as maintainer since I don't have much time to maintain anything 2019-07-03 11:27:39 +02:00
R. RyanTM
d546e77e54 sshguard: 2.3.1 -> 2.4.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/sshguard/versions
2019-07-03 09:32:08 +02:00
Ryan Mulligan
f1d56f67f9
Merge pull request #64218 from r-ryantm/auto-update/tpm2-tools
tpm2-tools: 3.1.4 -> 3.2.0
2019-07-02 21:06:06 -07:00
R. RyanTM
9e85956c0d tpm2-tools: 3.1.4 -> 3.2.0
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/tpm2-tools/versions
2019-07-02 18:53:01 -07:00
Ryan Mulligan
bb25197a00
Merge pull request #64076 from r-ryantm/auto-update/lynis
lynis: 2.7.4 -> 2.7.5
2019-07-01 18:21:58 -07:00
R. RyanTM
767de54938 lynis: 2.7.4 -> 2.7.5
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/lynis/versions
2019-07-01 16:52:26 -07:00
Alyssa Ross
ba23c14b84
gnupg: apply default server CA verification patch
See discussion at
https://github.com/NixOS/nixpkgs/pull/63952#issuecomment-507048690.

Upstream commit:

commit 1c9cc97e9d47d73763810dcb4a36b6cdf31a2254
Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Date:   Sun Jun 30 11:54:35 2019 -0400

    dirmngr: Only use SKS pool CA for SKS pool

    * dirmngr/http.c (http_session_new): when checking whether the
    keyserver is the HKPS pool, check specifically against the pool name,
    as ./configure might have been used to select a different default
    keyserver.  It makes no sense to apply Kristian's certificate
    authority to anything other than the literal host
    hkps.pool.sks-keyservers.net.

    Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
    GnuPG-Bug-Id: 4593
2019-06-30 19:06:17 +00:00
Alyssa Ross
c727083e65
gnupg: change default keyserver to non-SKS
See https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f.

The SKS network is vulnerable to certificate poisoning, which can
destroy GnuPG installations. keys.openpgp.org is a new non-SKS keyserver
that is resistant to this type of attack.

With such an attack being possible, it is unsafe to use SKS keyservers
for almost anything, and so we should protect our users from a now
unsafe default. keys.openpgp.org offers some (but not all) functionality
of SKS, and is better than nothing.

This default is only present in gnupg22. gnupg20 and gnupg1orig are not
affected.
2019-06-30 14:09:02 +00:00