Ludovic Courtès bc3c41ce36

download: Verify TLS certificates unless asked not to. ...

Fixes <http://bugs.gnu.org/24466>.
Reported by Leo Famulari <leo@famulari.name>.

* guix/build/download.scm (%x509-certificate-directory): New variable.
(make-credendials-with-ca-trust-files, peer-certificate)
(assert-valid-server-certificate, print-tls-certificate-error): New
procedures.  Add 'print-tls-certificate-error' as an exception printer
for 'tls-certificate-error'.
(tls-wrap): Add #:verify-certificate? parameter and honor it.
(open-connection-for-uri): Likewise.
(http-fetch): Likewise.
(url-fetch): Likewise.
* guix/download.scm (url-fetch)[builder]: Pass #:verify-certificate? #f.
* guix/scripts/lint.scm (probe-uri): Add case for 'tls-certificate-error'.
(validate-uri): Likewise.
* doc/guix.texi (Invoking guix download): Mention 'SSL_CERT_DIR'.

2016-11-07 23:39:01 +01:00

..

container

scripts: container: Fix 'exec' command line parsing.

2015-11-03 18:05:43 -05:00

import

ui: Do not shadow '_' where it's used as a literal syntax match.

2016-09-20 23:22:42 +09:00

archive.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

authenticate.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

build.scm

guix build: Add '--with-graft'.

2016-10-17 23:59:02 +02:00

challenge.scm

challenge: Disable grafting.

2016-07-14 19:07:07 +02:00

container.scm

scripts: Add 'container' subcommand.

2015-11-01 18:20:04 -05:00

download.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

edit.scm

edit: Do not honor 'GUIX_BUILD_OPTIONS'.

2016-08-19 17:34:37 +02:00

environment.scm

guix scripts: Disable grafting on dry runs.

2016-08-28 16:22:19 +02:00

gc.scm

guix gc: Display of saved space for garbage collection.

2016-07-16 14:41:39 +02:00

graph.scm

graph: Add '%referrer-node-type'.

2016-10-15 23:46:39 +02:00

hash.scm

guix hash: Interpret '-' as standard input.

2016-10-28 22:30:17 +02:00

import.scm

import: Gracefully report import failures.

2016-05-17 14:02:48 +02:00

lint.scm

download: Verify TLS certificates unless asked not to.

2016-11-07 23:39:01 +01:00

offload.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

package.scm

profiles: Extract a procedure for getting relative generation numbers.

2016-11-06 18:08:53 +01:00

publish.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

pull.scm

utils: Add 'switch-symlinks', moved from (guix ui).

2015-10-27 00:01:20 +01:00

refresh.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

size.scm

size: Fix corner case with multiple items on the command line.

2016-07-29 22:32:04 +02:00

substitute.scm

Use (ice-9 binary-ports) instead of (rnrs io ports).

2016-10-19 15:54:10 +02:00

system.scm

system: Add 'guix system' actions: switch-generation and roll-back.

2016-11-06 18:08:53 +01:00