Commit Graph

540 Commits

Author SHA1 Message Date
Maxime Devos
c14c2ebaee
openssl: Remove trailing #t from phases.
* gnu/packages/tls.scm
  (openssl)[arguments]<#:phases>: Delete trailing #t.

Signed-off-by: Mathieu Othacehe <othacehe@gnu.org>
2021-07-14 15:57:40 +02:00
Mathieu Othacehe
b4ccf3df0b
openssl: Fix indentation.
* gnu/packages/tls.scm (openssl): Fix indentation.
2021-07-14 15:30:54 +02:00
Efraim Flashner
c2dd2552db
gnu: openssl: Display configure environment.
* gnu/packages/tls.scm (openssl)[arguments]: Adjust custom 'configure
phase to also show how openssl is configured.
2021-07-13 09:28:14 +03:00
Efraim Flashner
919d687a04
gnu: openssl: Honor configure-flags.
* gnu/packages/tls.scm (openssl)[arguments]: Adjust custom 'configure
phase to also use configure-flags.
2021-07-13 09:24:19 +03:00
Marius Bakke
6f9a80b331
Merge branch 'master' into core-updates
Note: this merge actually changes the 'curl' and 'python-attrs' derivations,
as part of solving caf4a7a277 and
12964df69a respectively.

4604d43c0e (gnu: gnutls@3.6.16: Fix cross-compilation.) was ignored because it
cannot currently be tested.

 Conflicts:
	gnu/local.mk
	gnu/packages/aidc.scm
	gnu/packages/boost.scm
	gnu/packages/curl.scm
	gnu/packages/nettle.scm
	gnu/packages/networking.scm
	gnu/packages/python-xyz.scm
	gnu/packages/tls.scm
2021-06-19 17:38:47 +02:00
Brice Waegeneire
76a9bad380
gnu: libressl: Remove search paths.
Unlike OpenSSL, LibreSSL hardcode it's certificate bundle and doesn't
allow to specify it through a environment variable.

* gnu/packages/tls.scm (libressl)[configure-flags]: Specify OpenSSL
configuration directory.
[native-search-paths]: Remove it.
* gnu/packages/ntp.scm (openntpd)[configure-flags]: Adjust CAcert
location.
2021-06-17 08:14:47 +02:00
Marius Bakke
6a7a7c9d8f
gnu: OpenSSL: Remove replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1k.
[replacement]: Remove.
(openssl-1.1.1k): Remove variable.
2021-06-13 01:00:46 +02:00
Brice Waegeneire
618dbc14fc
gnu: libressl: Update to 3.3.3.
* gnu/packages/tls.scm (libressl): Update to 3.3.3.
2021-06-12 23:08:16 +02:00
Ludovic Courtès
4604d43c0e
gnu: gnutls@3.6.16: Fix cross-compilation.
Fixes <https://bugs.gnu.org/48771>.
Reported by Eric Brown <ecbrown@ericcbrown.com>.

* gnu/packages/tls.scm (gnutls-3.6.16)[arguments]: New field.
2021-06-06 23:12:18 +02:00
Marius Bakke
8d59c262ad
Merge branch 'master' into core-updates
Conflicts:
	gnu/local.mk
	gnu/packages/algebra.scm
	gnu/packages/bioinformatics.scm
	gnu/packages/curl.scm
	gnu/packages/docbook.scm
	gnu/packages/emacs-xyz.scm
	gnu/packages/maths.scm
	gnu/packages/plotutils.scm
	gnu/packages/python-web.scm
	gnu/packages/python-xyz.scm
	gnu/packages/radio.scm
	gnu/packages/readline.scm
	gnu/packages/tls.scm
	gnu/packages/xml.scm
	gnu/packages/xorg.scm
2021-06-06 21:16:32 +02:00
Maxim Cournoyer
63858f8c8b
gnu: gnutls: Update to 3.7.2.
The 3.7 branch, while not considered the "stable" branch upstream, has been
adopted by most major GNU/Linux distributions such as Debian, Arch, openSUSE,
etc.  It has the benefit of receiving all the security fixes.

* gnu/packages/tls.scm (gnutls): Update to 3.7.2.  Remove trailing #t.
[source]: Remove the gnutls-CVE-2021-20231.patch and
gnutls-CVE-2021-20232.patch patches, now incorporated in the source.
* gnu/packages/patches/gnutls-CVE-2021-20231.patch: Delete file.
* gnu/packages/patches/gnutls-CVE-2021-20232.patch: Likewise.
* gnu/local.mk (dist_patch_DATA): De-register them.
2021-06-06 00:50:16 -04:00
Solene Rapenne
0b70eb03cb
gnu: gnutls: Replace with 3.6.16 [fixes CVE-2021-20305].
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls-3.6.16): New variable.

Signed-off-by: Leo Famulari <leo@famulari.name>
2021-05-28 14:55:59 -04:00
Marius Bakke
250a216cdc
gnu: OpenSSL: Replace with 1.1.1k [fixes CVE-2021-3449 and CVE-2021-3450].
* gnu/packages/tls.scm (openssl-1.1.1k): New variable.
(openssl)[replacement]: New field.
2021-05-23 17:49:57 +02:00
Efraim Flashner
ce98de1fed
gnu: libtasn1: Update to 4.17.0.
* gnu/packages/tls.scm (libtasn1): Update to 4.17.0.
2021-05-13 22:11:10 +03:00
Marius Bakke
f034264204
Merge branch 'master' into core-updates
Conflicts:
	gnu/local.mk
	gnu/packages/bioinformatics.scm
	gnu/packages/django.scm
	gnu/packages/gtk.scm
	gnu/packages/llvm.scm
	gnu/packages/python-web.scm
	gnu/packages/python.scm
	gnu/packages/tex.scm
	guix/build-system/asdf.scm
	guix/build/emacs-build-system.scm
	guix/profiles.scm
2021-05-09 21:29:46 +02:00
Leo Famulari
069399ee9d
gnu: certbot, python-acme: Update to 1.15.0.
* gnu/packages/tls.scm (python-acme, certbot): Update to 1.15.0.
2021-05-09 12:44:27 -04:00
Leo Famulari
e12210dc92
gnu: GnuTLS: Absorb grafted replacement.
* gnu/packages/tls.scm (gnutls)[source]: Add 'gnutls-CVE-2021-20231.patch' and
'gnutls-CVE-2021-20232.patch'.
[replacement]: Remove field.
(gnutls/fixed): Remove variable.
2021-04-16 17:21:04 -04:00
Leo Famulari
0cb4032f9a
gnu: OpenSSL: Absorb grafted replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1j.
[replacement]: Remove field.
(openssl/fixed): Remove variable.
2021-04-16 16:57:27 -04:00
Leo Famulari
587510d7e7
gnu: certbot, python-acme: Update to 1.14.0.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.14.0.
2021-04-16 12:52:49 -04:00
Efraim Flashner
fcc39864db
Merge remote-tracking branch 'origin/master' into core-updates
Conflicts:
	gnu/local.mk
	gnu/packages/boost.scm
	gnu/packages/chez.scm
	gnu/packages/compression.scm
	gnu/packages/crates-io.scm
	gnu/packages/docbook.scm
	gnu/packages/engineering.scm
	gnu/packages/gcc.scm
	gnu/packages/gl.scm
	gnu/packages/gtk.scm
	gnu/packages/nettle.scm
	gnu/packages/python-check.scm
	gnu/packages/python-xyz.scm
	gnu/packages/radio.scm
	gnu/packages/rust.scm
	gnu/packages/sqlite.scm
	guix/build-system/node.scm
2021-04-16 14:39:48 +03:00
Tobias Geerinckx-Rice
b30407b82f
gnu: gnutls: Fix typos in description.
* gnu/packages/tls.scm (gnutls)[description]: Fix typos.

Reported by genr8 on #guix.
2021-03-28 18:46:23 +02:00
Léo Le Bouter
10cbf042e1
gnu: openssl: Update to 1.1.1k [security fixes].
Fixes CVE-2021-3450 and CVE-2021-3449.

* gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1k.
2021-03-25 17:53:53 +01:00
Efraim Flashner
2aab587f84
Merge remote-tracking branch 'origin/master' into core-updates 2021-03-24 20:50:44 +02:00
Leo Famulari
b082ea9406
gnu: OpenSSL: Refer to the version number in a more robust way.
* gnu/packages/tls.scm (openssl)[arguments]: Replace use of VERSION with
(PACKAGE-VERSION THIS-PACKAGE).
(openssl/fixed): Adjust accordingly.
2021-03-14 16:33:12 -04:00
Mark H Weaver
74e2c0e00f
gnu: gnutls: Fix CVE-2021-20231 and CVE-2021-20232.
* gnu/packages/patches/gnutls-CVE-2021-20231.patch,
gnu/packages/patches/gnutls-CVE-2021-20232.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls/fixed): New variable.
(guile2.2-gnutls): Use package/inherit.
2021-03-13 04:58:12 -05:00
Greg Hogan
1b51888863
gnu: Add s2n.
* gnu/packages/tls.scm (s2n): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-12 23:58:54 +01:00
Leo Famulari
a39faf1abd
gnu: OpenSSL: Fix version number in build configuration.
Fixes <https://bugs.gnu.org/47108>.

This is a followup to commit 4a8b529ce1.

* gnu/packages/tls.scm (openssl/fixed)[arguments]: New field.
2021-03-12 14:22:21 -05:00
Leo Famulari
c3a7537396
gnu: certbot, python-acme: Update to 1.13.0.
* gnu/packages/tls.scm (python-acme): Update to 1.13.0.
[native-inputs]: Remove python-mock.
[propagated-inputs]: Remove python-six.
(certbot): Update to 1.13.0.
[propagated-inputs]: Remove python-six.
[arguments]: Remove 'build-documentation' phase.
2021-03-11 21:41:47 -05:00
Léo Le Bouter
4a8b529ce1
gnu: openssl: Update to 1.1.1j [security fixes].
* gnu/packages/tls.scm (openssl/fixed): New variable.
(openssl)[replacement]: Graft.
2021-03-11 05:38:57 +01:00
Christopher Baines
a8448da0f4
Merge branch 'master' into core-updates 2021-03-06 00:18:30 +00:00
Leo Famulari
1e1549a7a7
gnu: certbot, python-acme: Update to 1.12.0.
* gnu/packages/tls.scm (python-acme): Update to 1.12.0.
(certbot): Update to 1.12.0.
[arguments]: Replace the 'build-documentation' phase.
2021-03-03 12:08:26 -05:00
Maxim Cournoyer
01f0707207
Merge branch 'staging' into 'core-updates'.
Conflicts:

	gnu/local.mk
	gnu/packages/cmake.scm
	gnu/packages/curl.scm
	gnu/packages/gl.scm
	gnu/packages/glib.scm
	gnu/packages/guile.scm
	gnu/packages/node.scm
	gnu/packages/openldap.scm
	gnu/packages/package-management.scm
	gnu/packages/python-xyz.scm
	gnu/packages/python.scm
	gnu/packages/tls.scm
	gnu/packages/vpn.scm
	gnu/packages/xorg.scm
2021-01-13 23:45:53 -05:00
Efraim Flashner
6985a1acb3
Merge branch 'master' into staging 2021-01-10 14:30:36 +02:00
Tobias Geerinckx-Rice
db20165728
gnu: libressl: Update to 3.1.5 [security fix].
* gnu/packages/tls.scm (libressl): Update to 3.1.5.
2021-01-03 06:55:35 +01:00
Marius Bakke
a22e75c073
Merge branch 'master' into ungrafting 2020-12-29 17:37:17 +01:00
Leo Famulari
a83866e4f2
gnu: certbot, python-acme: Update to 1.10.1.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.10.1.
2020-12-21 20:21:13 -05:00
Marius Bakke
bbe4ed65ed
Merge branch 'master' into ungrafting 2020-12-21 23:42:10 +01:00
Tobias Geerinckx-Rice
9ed4600777
gnu: p11-kit: Fix source hash.
(Obviously) the tarball wasn't updated in place, and the .sig did check
out, but I forgot to commit it because I'm a bit of an idiot.

* gnu/packages/tls.scm (p11-kit)[source]: Update hash.
2020-12-20 20:21:58 +01:00
Tobias Geerinckx-Rice
c84c0dbc38
gnu: p11-kit: Update to 0.23.22.
* gnu/packages/tls.scm (p11-kit): Update to 0.23.22.
2020-12-20 19:04:22 +01:00
Tobias Geerinckx-Rice
69b98261e7
gnu: dehydrated: Update to 0.7.0.
* gnu/packages/tls.scm (dehydrated): Update to 0.7.0.
2020-12-19 00:00:06 +01:00
Leo Famulari
02b21f35cc
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl)[replacement]: Update replacement to 1.1.1i
(openssl-1.1.1g): Replace with ...
(openssl-1.1.1i): ... new variable.
2020-12-08 19:48:09 -05:00
Marius Bakke
6d9b23cbf2
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl): Update to 1.1.1i.
2020-12-08 22:57:53 +01:00
Ludovic Courtès
c4868e3828
gnu: openssl: Update to 1.1.1g and remove replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1g.
[replacement]: Remove.
(openssl-1.1.1g): Remove.
2020-12-08 14:06:57 +01:00
Ludovic Courtès
51a365c183
gnu: gnutls: Update to 3.6.15 and remove replacement.
* gnu/packages/tls.scm (gnutls): Update to 3.6.15.
[source]: Add "gnutls-cross.patch".
[replacement]: Remove.
[native-inputs]: Add GUILE-3.0 when (%current-target-system) is true.
(gnutls/fixed): Remove.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Remove
reference to 'gnutls/fixed'.
* gnu/packages/tls.scm (gnutls/dane): Inherit from gnutls.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Remove
gnutls/fixed, add gnutls.

Co-authored-by: Efraim Flashner <efraim@flashner.co.il>
2020-12-08 14:06:20 +01:00
Marius Bakke
7177411c34
gnu: gnutls-dane: Inherit from newer GnuTLS.
Fixes <https://bugs.gnu.org/44914>.

* gnu/packages/tls.scm (gnutls/dane): Inherit from GNUTLS/FIXED instead of
GNUTLS.
2020-12-03 21:56:52 +01:00
Marius Bakke
c5df560fd3
gnu: GnuTLS: Update replacement to 3.6.15 [fixes CVE-2020-24659].
* gnu/packages/tls.scm (gnutls-3.6.14): Rename to ...
(gnutls/fixed): ... this.  Update to 3.6.15.
(gnutls): Adjust for renamed replacement.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Likewise.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Likewise.
2020-12-03 21:56:52 +01:00
Christopher Baines
ff01206345
Merge remote-tracking branch 'origin/master' into core-updates 2020-11-29 17:34:18 +00:00
Efraim Flashner
c8535c2527
gnu: openssl: Fix cross compiling for powerpc targets.
* gnu/packages/tls.scm (openssl)[arguments]: Add cross compile target
cases for powerpc64le-linux, powerpc64-linux and powerpc-linux.
2020-11-21 22:05:44 +02:00
Christopher Baines
8a59448770
gnu: gnutls: Make p11-kit a propagated input.
Because p11-kit appears in the gnutls.pc file, it needs to be a propagated
input.

This was a regression introduced in 28a13226fd
which broke things like HTTPS support in curl, which then broke Git clones
from repositories using HTTPS.

* gnu/packages/tls.scm (gnutls)[inputs]: Move p11-kit from here.
[propagated-inputs]: To here.
2020-11-17 21:38:06 +00:00
Efraim Flashner
d4dbcb81bc
gnu: openssl: Fix indentation.
* gnu/packages/tls.scm (openssl): Fix indentation of package definition.
2020-11-08 10:16:41 +02:00