Commit Graph

525 Commits

Author SHA1 Message Date
Maxim Cournoyer
d0cc63ccc5
gnu: dehydrated: Follow up commit to 77e2df870b.
* gnu/packages/tls.scm (dehydrated): Remove bogus, nested native-search-paths.
2021-08-03 16:12:59 -04:00
Tobias Geerinckx-Rice
77e2df870b
gnu: dehydrated: Declare cURL's native search paths.
* gnu/packages/tls.scm (dehydrated)[native-search-paths]: Use curl's.

Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2021-08-03 15:47:06 -04:00
Matthew James Kraai
0ca6e13612
gnu: certbot, python-acme: Update to 1.17.0.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.17.0.

Signed-off-by: Leo Famulari <leo@famulari.name>
2021-07-27 02:15:19 -04:00
Matthew James Kraai
0ec7559875
gnu: mbedtls-apache: Update to 2.26.0.
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.26.0.
[source]: Add snippet.

Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2021-07-05 10:05:07 +03:00
Matthew James Kraai
d4febc56bb
gnu: mbedtls-apache: Update home page.
* gnu/packages/tls.scm (mbedtls-apache)[home-page]: Update.

Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2021-07-03 22:47:39 +02:00
Tobias Geerinckx-Rice
9f9118bdca
gnu: s2n: Expand description.
* gnu/packages/tls.scm (s2n)[synopsis, description]: Add some more
upstream words.
2021-06-24 00:31:53 +02:00
Tobias Geerinckx-Rice
08c579ed7a
gnu: s2n: Update to 1.0.10.
* gnu/packages/tls.scm (s2n): Update to 1.0.10.
2021-06-24 00:31:52 +02:00
Matthew James Kraai
2bb789f6e0
gnu: certbot, python-acme: Update to 1.16.0.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.16.0.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-06-23 23:35:27 +02:00
Brice Waegeneire
76a9bad380
gnu: libressl: Remove search paths.
Unlike OpenSSL, LibreSSL hardcode it's certificate bundle and doesn't
allow to specify it through a environment variable.

* gnu/packages/tls.scm (libressl)[configure-flags]: Specify OpenSSL
configuration directory.
[native-search-paths]: Remove it.
* gnu/packages/ntp.scm (openntpd)[configure-flags]: Adjust CAcert
location.
2021-06-17 08:14:47 +02:00
Brice Waegeneire
618dbc14fc
gnu: libressl: Update to 3.3.3.
* gnu/packages/tls.scm (libressl): Update to 3.3.3.
2021-06-12 23:08:16 +02:00
Ludovic Courtès
4604d43c0e
gnu: gnutls@3.6.16: Fix cross-compilation.
Fixes <https://bugs.gnu.org/48771>.
Reported by Eric Brown <ecbrown@ericcbrown.com>.

* gnu/packages/tls.scm (gnutls-3.6.16)[arguments]: New field.
2021-06-06 23:12:18 +02:00
Solene Rapenne
0b70eb03cb
gnu: gnutls: Replace with 3.6.16 [fixes CVE-2021-20305].
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls-3.6.16): New variable.

Signed-off-by: Leo Famulari <leo@famulari.name>
2021-05-28 14:55:59 -04:00
Marius Bakke
250a216cdc
gnu: OpenSSL: Replace with 1.1.1k [fixes CVE-2021-3449 and CVE-2021-3450].
* gnu/packages/tls.scm (openssl-1.1.1k): New variable.
(openssl)[replacement]: New field.
2021-05-23 17:49:57 +02:00
Leo Famulari
069399ee9d
gnu: certbot, python-acme: Update to 1.15.0.
* gnu/packages/tls.scm (python-acme, certbot): Update to 1.15.0.
2021-05-09 12:44:27 -04:00
Leo Famulari
e12210dc92
gnu: GnuTLS: Absorb grafted replacement.
* gnu/packages/tls.scm (gnutls)[source]: Add 'gnutls-CVE-2021-20231.patch' and
'gnutls-CVE-2021-20232.patch'.
[replacement]: Remove field.
(gnutls/fixed): Remove variable.
2021-04-16 17:21:04 -04:00
Leo Famulari
0cb4032f9a
gnu: OpenSSL: Absorb grafted replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1j.
[replacement]: Remove field.
(openssl/fixed): Remove variable.
2021-04-16 16:57:27 -04:00
Leo Famulari
587510d7e7
gnu: certbot, python-acme: Update to 1.14.0.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.14.0.
2021-04-16 12:52:49 -04:00
Tobias Geerinckx-Rice
b30407b82f
gnu: gnutls: Fix typos in description.
* gnu/packages/tls.scm (gnutls)[description]: Fix typos.

Reported by genr8 on #guix.
2021-03-28 18:46:23 +02:00
Léo Le Bouter
10cbf042e1
gnu: openssl: Update to 1.1.1k [security fixes].
Fixes CVE-2021-3450 and CVE-2021-3449.

* gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1k.
2021-03-25 17:53:53 +01:00
Leo Famulari
b082ea9406
gnu: OpenSSL: Refer to the version number in a more robust way.
* gnu/packages/tls.scm (openssl)[arguments]: Replace use of VERSION with
(PACKAGE-VERSION THIS-PACKAGE).
(openssl/fixed): Adjust accordingly.
2021-03-14 16:33:12 -04:00
Mark H Weaver
74e2c0e00f
gnu: gnutls: Fix CVE-2021-20231 and CVE-2021-20232.
* gnu/packages/patches/gnutls-CVE-2021-20231.patch,
gnu/packages/patches/gnutls-CVE-2021-20232.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls/fixed): New variable.
(guile2.2-gnutls): Use package/inherit.
2021-03-13 04:58:12 -05:00
Greg Hogan
1b51888863
gnu: Add s2n.
* gnu/packages/tls.scm (s2n): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-12 23:58:54 +01:00
Leo Famulari
a39faf1abd
gnu: OpenSSL: Fix version number in build configuration.
Fixes <https://bugs.gnu.org/47108>.

This is a followup to commit 4a8b529ce1.

* gnu/packages/tls.scm (openssl/fixed)[arguments]: New field.
2021-03-12 14:22:21 -05:00
Leo Famulari
c3a7537396
gnu: certbot, python-acme: Update to 1.13.0.
* gnu/packages/tls.scm (python-acme): Update to 1.13.0.
[native-inputs]: Remove python-mock.
[propagated-inputs]: Remove python-six.
(certbot): Update to 1.13.0.
[propagated-inputs]: Remove python-six.
[arguments]: Remove 'build-documentation' phase.
2021-03-11 21:41:47 -05:00
Léo Le Bouter
4a8b529ce1
gnu: openssl: Update to 1.1.1j [security fixes].
* gnu/packages/tls.scm (openssl/fixed): New variable.
(openssl)[replacement]: Graft.
2021-03-11 05:38:57 +01:00
Leo Famulari
1e1549a7a7
gnu: certbot, python-acme: Update to 1.12.0.
* gnu/packages/tls.scm (python-acme): Update to 1.12.0.
(certbot): Update to 1.12.0.
[arguments]: Replace the 'build-documentation' phase.
2021-03-03 12:08:26 -05:00
Efraim Flashner
6985a1acb3
Merge branch 'master' into staging 2021-01-10 14:30:36 +02:00
Tobias Geerinckx-Rice
db20165728
gnu: libressl: Update to 3.1.5 [security fix].
* gnu/packages/tls.scm (libressl): Update to 3.1.5.
2021-01-03 06:55:35 +01:00
Marius Bakke
a22e75c073
Merge branch 'master' into ungrafting 2020-12-29 17:37:17 +01:00
Leo Famulari
a83866e4f2
gnu: certbot, python-acme: Update to 1.10.1.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.10.1.
2020-12-21 20:21:13 -05:00
Marius Bakke
bbe4ed65ed
Merge branch 'master' into ungrafting 2020-12-21 23:42:10 +01:00
Tobias Geerinckx-Rice
9ed4600777
gnu: p11-kit: Fix source hash.
(Obviously) the tarball wasn't updated in place, and the .sig did check
out, but I forgot to commit it because I'm a bit of an idiot.

* gnu/packages/tls.scm (p11-kit)[source]: Update hash.
2020-12-20 20:21:58 +01:00
Tobias Geerinckx-Rice
c84c0dbc38
gnu: p11-kit: Update to 0.23.22.
* gnu/packages/tls.scm (p11-kit): Update to 0.23.22.
2020-12-20 19:04:22 +01:00
Tobias Geerinckx-Rice
69b98261e7
gnu: dehydrated: Update to 0.7.0.
* gnu/packages/tls.scm (dehydrated): Update to 0.7.0.
2020-12-19 00:00:06 +01:00
Leo Famulari
02b21f35cc
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl)[replacement]: Update replacement to 1.1.1i
(openssl-1.1.1g): Replace with ...
(openssl-1.1.1i): ... new variable.
2020-12-08 19:48:09 -05:00
Marius Bakke
6d9b23cbf2
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl): Update to 1.1.1i.
2020-12-08 22:57:53 +01:00
Ludovic Courtès
c4868e3828
gnu: openssl: Update to 1.1.1g and remove replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1g.
[replacement]: Remove.
(openssl-1.1.1g): Remove.
2020-12-08 14:06:57 +01:00
Ludovic Courtès
51a365c183
gnu: gnutls: Update to 3.6.15 and remove replacement.
* gnu/packages/tls.scm (gnutls): Update to 3.6.15.
[source]: Add "gnutls-cross.patch".
[replacement]: Remove.
[native-inputs]: Add GUILE-3.0 when (%current-target-system) is true.
(gnutls/fixed): Remove.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Remove
reference to 'gnutls/fixed'.
* gnu/packages/tls.scm (gnutls/dane): Inherit from gnutls.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Remove
gnutls/fixed, add gnutls.

Co-authored-by: Efraim Flashner <efraim@flashner.co.il>
2020-12-08 14:06:20 +01:00
Marius Bakke
7177411c34
gnu: gnutls-dane: Inherit from newer GnuTLS.
Fixes <https://bugs.gnu.org/44914>.

* gnu/packages/tls.scm (gnutls/dane): Inherit from GNUTLS/FIXED instead of
GNUTLS.
2020-12-03 21:56:52 +01:00
Marius Bakke
c5df560fd3
gnu: GnuTLS: Update replacement to 3.6.15 [fixes CVE-2020-24659].
* gnu/packages/tls.scm (gnutls-3.6.14): Rename to ...
(gnutls/fixed): ... this.  Update to 3.6.15.
(gnutls): Adjust for renamed replacement.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Likewise.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Likewise.
2020-12-03 21:56:52 +01:00
Efraim Flashner
c8535c2527
gnu: openssl: Fix cross compiling for powerpc targets.
* gnu/packages/tls.scm (openssl)[arguments]: Add cross compile target
cases for powerpc64le-linux, powerpc64-linux and powerpc-linux.
2020-11-21 22:05:44 +02:00
Efraim Flashner
d4dbcb81bc
gnu: openssl: Fix indentation.
* gnu/packages/tls.scm (openssl): Fix indentation of package definition.
2020-11-08 10:16:41 +02:00
Efraim Flashner
2496b92e6c
gnu: openssl: Fix cross compiling for mips64el-linux.
* gnu/packages/tls.scm (openssl)[arguments]: When cross compiling add
case for mips64el-linux.
2020-11-08 10:10:27 +02:00
Leo Famulari
ad67d20869
gnu: certbot, python-acme: Update to 1.8.0.
* gnu/packages/tls.scm (certbot, python-acme): Update 1.8.0.
2020-10-21 18:32:06 -04:00
Tobias Geerinckx-Rice
1aa375528b
gnu: libressl: Update to 3.1.4.
* gnu/packages/tls.scm (libressl): Update to 3.1.4.
2020-10-16 15:09:52 +02:00
Mathieu Othacehe
525a351efa
gnu: gnutls: Fix cross-compilation.
* gnu/packages/tls.scm (gnutls)[arguments]: Disable tests when
cross-compiling.
2020-10-05 11:10:35 +02:00
Tobias Geerinckx-Rice
149d91814c
gnu: p11-kit: Update to 0.23.21.
* gnu/packages/tls.scm (p11-kit): Update to 0.23.21.
2020-08-20 21:17:03 +02:00
Tobias Geerinckx-Rice
5cdb25c686
gnu: mbedtls-apache-for-hiawatha: Fix.
There's already a custom embedtls-apache variant for Hiawatha.
Fix it instead of enabling threading for embedtls-apache.

* gnu/packages/tls.scm (embedtls-for-hiawatha): Fix usage of
SUBSTITUTE-KEYWORD-ARGUMENTS.  Disable -Wformat-signedness.
(embedtls-for-hiawatha): Remove ‘enable-features’ phase.
2020-07-14 03:57:05 +02:00
Tobias Geerinckx-Rice
927ecd4ebe
gnu: mbedtls-apache: Update to 2.23.0 [security fixes].
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.23.0.
[source]: Use GIT-FETCH and GIT-FILE-NAME.
[arguments]: Make source files writable.  Enable threading.
2020-07-14 03:25:04 +02:00
Ludovic Courtès
9015ed6688
gnu: gnutls: Pass #:tests? unconditionally.
* gnu/packages/tls.scm (gnutls)[arguments]: Add #:tests? unconditionally.
2020-06-20 23:36:02 +02:00