Commit Graph

204 Commits

Author SHA1 Message Date
Cole Helbling
1dba117541
gnutls: 3.6.13 -> 3.6.14
Fixes CVE-2020-13777 [1].

Changes: https://lists.gnupg.org/pipermail/gnutls-help/2020-June/004648.html

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-13777
2020-06-08 23:14:05 -07:00
Timo Kaufmann
bbb8132790
Merge pull request #80206 from Thra11/guile-gnutls
gnutls: fix guile bindings
2020-05-07 18:01:32 +00:00
Fabian Möller
0665c8776a
gnutls: fix musl build
`musl` produces a different output than `glibc` during some tests, which
let's them fail.

Using `getpass(3)` under `musl` when `stdin` is not a tty omits the
prompt, which the `certtool` test expects to find.

See https://gitlab.com/gnutls/gnutls/-/issues/945
2020-05-06 17:37:55 +02:00
Pavol Rusnak
7b0167204d treewide: use https for nixos.org and hydra.nixos.org
tarballs.nixos.org is omitted from the change because urls from there
are always hashed and checked
2020-05-03 22:14:21 -07:00
Jan Tojnar
a04625379a
Merge branch 'master' into staging-next 2020-04-13 18:50:35 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Martin Milata
7cb24f9a8f gnutls: 3.6.12 -> 3.6.13
Fixes CVE-2020-11501.

Changes: https://lists.gnupg.org/pipermail/gnutls-help/2020-March/004642.html
2020-04-04 22:04:07 +02:00
Tom Hall
a7dc5f524c gnutls: fix guile bindings 2020-02-15 21:50:34 +00:00
Vladimír Čunát
3668d993a3
gnutls: move some docs that don't seem useful normally 2020-02-10 21:55:23 +01:00
R. RyanTM
07db37b935 gnutls: 3.6.11.1 -> 3.6.12 2020-02-09 09:00:17 +01:00
Will Dietz
c555684c6d gnutls: 3.6.10 -> 3.6.11 2019-12-05 10:26:56 +01:00
Robin Gloster
04fac845a4
Merge pull request #70596 from r-ryantm/auto-update/gnutls
gnutls: 3.6.9 -> 3.6.10
2019-10-16 00:15:24 +02:00
Ricardo M. Correia
2b24d465cc gnutls: fix test-ciphers-api.sh failure on aarch64
See https://gitlab.com/gnutls/gnutls/issues/764 for more info.
2019-10-10 01:12:11 +02:00
R. RyanTM
8340bd9562 gnutls: 3.6.9 -> 3.6.10
Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/gnutls/versions
2019-10-07 02:16:44 -07:00
Will Dietz
e309ddb263
gnutls: 3.6.8 -> 3.6.9
https://gitlab.com/gnutls/gnutls/blob/gnutls_3_6_9/NEWS
2019-07-25 23:43:53 -05:00
Vladimír Čunát
07dbc438cc
gnutls: 3.6.7 -> 3.6.8 (bugfix)
No security fixes announced.
https://lists.gnupg.org/pipermail/gnutls-help/2019-May/004527.html
2019-05-28 13:51:55 +02:00
Vladimír Čunát
347cd8add7
gnutls: fix tests after 79bd4ad57 (PR #61179)
It's one of the places that would reach out to /etc/ otherwise,
so I expect we have to pay this price to get the effect.
Hopefully there won't be too many places to patch.
2019-05-19 14:45:52 +02:00
Vladimír Čunát
39c2b6452c
gnutls: respect NIX_SSL_CERT_FILE, same as our openssl
The patch should work fine, regardless of the Darwin patch being applied.
2019-04-22 16:43:45 +02:00
Daiderd Jordan
33e7d721b6
gnutls: remove 3.5.10
Nix packages are expected to honor NIX_SSL_CERT_FILE and this removes the
dependency on the framework while bootstrapping the stdenv.
(+ nitpick changes from vcunat)

The patch is based on c0eb46d346
2019-04-22 16:43:28 +02:00
Will Dietz
225b164cc3
gnutls: 3.6.6 -> 3.6.7, security!
https://lists.gnupg.org/pipermail/gnutls-help/2019-March/004497.html
Close #58437.
2019-03-28 11:58:27 +01:00
Jan Malakhovski
0df915c75c gnutls, gnutls-kdh: move defaults to package file 2019-02-03 15:33:26 +00:00
Will Dietz
4fe53f33a6 gnutls: drop comment, no longer needed 2019-01-27 14:59:58 -06:00
Will Dietz
5eca7642ad gnutls: 3.6.5 -> 3.6.6
"bug fix release on the stable branch"

https://lists.gnupg.org/pipermail/gnutls-help/2019-January/004484.html
2019-01-27 10:48:15 -06:00
Matthew Bauer
92f0f8dd68 Merge remote-tracking branch 'NixOS/master' into staging 2019-01-27 00:01:13 -05:00
Jörg Thalheim
b5c1deca8a
treewide: remove wkennington as maintainer
He prefers to contribute to his own nixpkgs fork triton.
Since he is still marked as maintainer in many packages
this leaves the wrong impression he still maintains those.
2019-01-26 10:05:32 +00:00
Vladimír Čunát
2ff530ec53
gnutls: 3.6.2 -> 3.6.5
No security problems have been published about 3.6.x so far,
but I'd certainly count the almost-transparent TLS 1.3 support
as a security improvement.
2019-01-21 17:54:34 +01:00
c0bw3b
0498ccd076 Treewide: use HTTPS on GNU domains
HTTP -> HTTPS for :
- http://gnu.org/
- http://www.gnu.org/
- http://elpa.gnu.org/
- http://lists.gnu.org/
- http://gcc.gnu.org/
- http://ftp.gnu.org/ (except in fetchurl mirrors)
- http://bugs.gnu.org/
2018-12-02 15:51:59 +01:00
volth
52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
Matthew Bauer
9109a90479 treewide: remove some more gettext references 2018-03-22 16:50:14 -05:00
Frederik Rietdijk
4f08b0fbac Merge remote-tracking branch 'upstream/master' into HEAD 2018-02-26 10:50:18 +01:00
Jan Tojnar
a31d98f312
tree-wide: autorename gnome packages to use dashes 2018-02-25 17:41:16 +01:00
Tuomas Tynkkynen
54ac74c558 gnutls: 3.6.1 -> 3.6.2 2018-02-22 08:24:02 +02:00
Dylan Simon
85f81f5ef5 gnutls: fix (failing) p11-kit test
The p11-kit-trust test looks in /usr/lib for pkcs11 modules.  As a
result it is unnecessarily skipped on sandboxed builds, and fails on
unsandboxed builds with a system p11-kit.  Replace hard-coded /usr/lib
paths with pkg-config.
2018-01-27 12:39:02 -05:00
Vladimír Čunát
8b53b2ec2c
Merge branch 'master' into staging 2017-11-28 21:06:44 +01:00
Vladimír Čunát
e0368f5076
gnutls: use mirror://gnupg (fix #32147)
ftp.gnutls.org stopped working with curl; it's not clear yet why.
2017-11-28 20:43:56 +01:00
Vladimír Čunát
d70d5c9ddb
gnutls: force rebuild
If you have fixed-output derivation with correct hash but bad builder
on Hydra, it seems really difficult to restart it with a good builder.
2017-11-28 09:38:05 +01:00
Vladimír Čunát
7393665803
gnutls: fixup download URL after update
I'm sorry about that; I forgot 3.5 in there.
Still, I don't know why their ftp won't work well with curl;
wget is perfectly OK.
2017-11-28 07:58:08 +01:00
Vladimír Čunát
529c5c50b1
gnutls: 3.5.15 -> 3.6.1
No breaking changes expected, as the ABI is still 3.4.0.
2017-11-27 12:42:11 +01:00
Ben Gamari
3ed6239d6b gnutls: Don't run tests when cross-compiling 2017-10-27 20:32:25 -04:00
Tim Steinbach
5c66a4e221
gnutls: 3.5.14 -> 3.5.15 2017-09-02 13:18:47 -04:00
Daiderd Jordan
7960bbff14
gnutls: fix darwin build 2017-08-06 13:07:52 +02:00
Franz Pletz
3bb9954a6b
dns-root-data: init at 2017-06-16 2017-07-12 09:45:25 +02:00
Vladimír Čunát
febadbce3f
gnutls: bugfix 3.5.13 -> 3.5.14 2017-07-05 09:09:12 +02:00
Franz Pletz
cb59381eee
gnutls: remove dependency on unbound
Unbound is used for DANE support but this requires the unbound trust
anchor in /etc/unbound/root.key which we don't create in any NixOS
module.
2017-06-15 13:43:01 +02:00
Robin Gloster
4268eb5145
gnutls: remove unused parameter 2017-06-12 17:44:43 +02:00
Vladimír Čunát
9135c9f73a
gnutls: maintenance 3.5.12 -> 3.5.13
It contains a fix for DOS possibility in servers.
http://gnutls.org/security.html#GNUTLS-SA-2017-4
2017-06-07 08:56:05 +02:00
mimadrid
c68a241208
gnutls: 3.5.11 -> 3.5.12 2017-05-15 19:32:35 +02:00
Vladimír Čunát
42fd72091e
gnutls: use 3.5.10 on Darwin for now
This contains a revert of d6454e6a1.
2017-04-13 09:39:02 +02:00
Vladimír Čunát
d6454e6a15
gnutls: try to fix build on Darwin, after update 2017-04-11 03:39:47 +02:00
Vladimír Čunát
6d1374238f
gnutls: bugfix 3.5.10 -> 3.5.11 2017-04-10 17:53:54 +02:00