Commit graph

518 commits

Author SHA1 Message Date
Efraim Flashner
2aab587f84
Merge remote-tracking branch 'origin/master' into core-updates 2021-03-24 20:50:44 +02:00
Leo Famulari
b082ea9406
gnu: OpenSSL: Refer to the version number in a more robust way.
* gnu/packages/tls.scm (openssl)[arguments]: Replace use of VERSION with
(PACKAGE-VERSION THIS-PACKAGE).
(openssl/fixed): Adjust accordingly.
2021-03-14 16:33:12 -04:00
Mark H Weaver
74e2c0e00f
gnu: gnutls: Fix CVE-2021-20231 and CVE-2021-20232.
* gnu/packages/patches/gnutls-CVE-2021-20231.patch,
gnu/packages/patches/gnutls-CVE-2021-20232.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/tls.scm (gnutls)[replacement]: New field.
(gnutls/fixed): New variable.
(guile2.2-gnutls): Use package/inherit.
2021-03-13 04:58:12 -05:00
Greg Hogan
1b51888863
gnu: Add s2n.
* gnu/packages/tls.scm (s2n): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2021-03-12 23:58:54 +01:00
Leo Famulari
a39faf1abd
gnu: OpenSSL: Fix version number in build configuration.
Fixes <https://bugs.gnu.org/47108>.

This is a followup to commit 4a8b529ce1.

* gnu/packages/tls.scm (openssl/fixed)[arguments]: New field.
2021-03-12 14:22:21 -05:00
Leo Famulari
c3a7537396
gnu: certbot, python-acme: Update to 1.13.0.
* gnu/packages/tls.scm (python-acme): Update to 1.13.0.
[native-inputs]: Remove python-mock.
[propagated-inputs]: Remove python-six.
(certbot): Update to 1.13.0.
[propagated-inputs]: Remove python-six.
[arguments]: Remove 'build-documentation' phase.
2021-03-11 21:41:47 -05:00
Léo Le Bouter
4a8b529ce1
gnu: openssl: Update to 1.1.1j [security fixes].
* gnu/packages/tls.scm (openssl/fixed): New variable.
(openssl)[replacement]: Graft.
2021-03-11 05:38:57 +01:00
Christopher Baines
a8448da0f4
Merge branch 'master' into core-updates 2021-03-06 00:18:30 +00:00
Leo Famulari
1e1549a7a7
gnu: certbot, python-acme: Update to 1.12.0.
* gnu/packages/tls.scm (python-acme): Update to 1.12.0.
(certbot): Update to 1.12.0.
[arguments]: Replace the 'build-documentation' phase.
2021-03-03 12:08:26 -05:00
Maxim Cournoyer
01f0707207
Merge branch 'staging' into 'core-updates'.
Conflicts:

	gnu/local.mk
	gnu/packages/cmake.scm
	gnu/packages/curl.scm
	gnu/packages/gl.scm
	gnu/packages/glib.scm
	gnu/packages/guile.scm
	gnu/packages/node.scm
	gnu/packages/openldap.scm
	gnu/packages/package-management.scm
	gnu/packages/python-xyz.scm
	gnu/packages/python.scm
	gnu/packages/tls.scm
	gnu/packages/vpn.scm
	gnu/packages/xorg.scm
2021-01-13 23:45:53 -05:00
Efraim Flashner
6985a1acb3
Merge branch 'master' into staging 2021-01-10 14:30:36 +02:00
Tobias Geerinckx-Rice
db20165728
gnu: libressl: Update to 3.1.5 [security fix].
* gnu/packages/tls.scm (libressl): Update to 3.1.5.
2021-01-03 06:55:35 +01:00
Marius Bakke
a22e75c073
Merge branch 'master' into ungrafting 2020-12-29 17:37:17 +01:00
Leo Famulari
a83866e4f2
gnu: certbot, python-acme: Update to 1.10.1.
* gnu/packages/tls.scm (certbot, python-acme): Update to 1.10.1.
2020-12-21 20:21:13 -05:00
Marius Bakke
bbe4ed65ed
Merge branch 'master' into ungrafting 2020-12-21 23:42:10 +01:00
Tobias Geerinckx-Rice
9ed4600777
gnu: p11-kit: Fix source hash.
(Obviously) the tarball wasn't updated in place, and the .sig did check
out, but I forgot to commit it because I'm a bit of an idiot.

* gnu/packages/tls.scm (p11-kit)[source]: Update hash.
2020-12-20 20:21:58 +01:00
Tobias Geerinckx-Rice
c84c0dbc38
gnu: p11-kit: Update to 0.23.22.
* gnu/packages/tls.scm (p11-kit): Update to 0.23.22.
2020-12-20 19:04:22 +01:00
Tobias Geerinckx-Rice
69b98261e7
gnu: dehydrated: Update to 0.7.0.
* gnu/packages/tls.scm (dehydrated): Update to 0.7.0.
2020-12-19 00:00:06 +01:00
Leo Famulari
02b21f35cc
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl)[replacement]: Update replacement to 1.1.1i
(openssl-1.1.1g): Replace with ...
(openssl-1.1.1i): ... new variable.
2020-12-08 19:48:09 -05:00
Marius Bakke
6d9b23cbf2
gnu: OpenSSL: Update to 1.1.1i [fixes CVE-2020-1971].
* gnu/packages/tls.scm (openssl): Update to 1.1.1i.
2020-12-08 22:57:53 +01:00
Ludovic Courtès
c4868e3828
gnu: openssl: Update to 1.1.1g and remove replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1g.
[replacement]: Remove.
(openssl-1.1.1g): Remove.
2020-12-08 14:06:57 +01:00
Ludovic Courtès
51a365c183
gnu: gnutls: Update to 3.6.15 and remove replacement.
* gnu/packages/tls.scm (gnutls): Update to 3.6.15.
[source]: Add "gnutls-cross.patch".
[replacement]: Remove.
[native-inputs]: Add GUILE-3.0 when (%current-target-system) is true.
(gnutls/fixed): Remove.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Remove
reference to 'gnutls/fixed'.
* gnu/packages/tls.scm (gnutls/dane): Inherit from gnutls.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Remove
gnutls/fixed, add gnutls.

Co-authored-by: Efraim Flashner <efraim@flashner.co.il>
2020-12-08 14:06:20 +01:00
Marius Bakke
7177411c34
gnu: gnutls-dane: Inherit from newer GnuTLS.
Fixes <https://bugs.gnu.org/44914>.

* gnu/packages/tls.scm (gnutls/dane): Inherit from GNUTLS/FIXED instead of
GNUTLS.
2020-12-03 21:56:52 +01:00
Marius Bakke
c5df560fd3
gnu: GnuTLS: Update replacement to 3.6.15 [fixes CVE-2020-24659].
* gnu/packages/tls.scm (gnutls-3.6.14): Rename to ...
(gnutls/fixed): ... this.  Update to 3.6.15.
(gnutls): Adjust for renamed replacement.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Likewise.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Likewise.
2020-12-03 21:56:52 +01:00
Christopher Baines
ff01206345
Merge remote-tracking branch 'origin/master' into core-updates 2020-11-29 17:34:18 +00:00
Efraim Flashner
c8535c2527
gnu: openssl: Fix cross compiling for powerpc targets.
* gnu/packages/tls.scm (openssl)[arguments]: Add cross compile target
cases for powerpc64le-linux, powerpc64-linux and powerpc-linux.
2020-11-21 22:05:44 +02:00
Christopher Baines
8a59448770
gnu: gnutls: Make p11-kit a propagated input.
Because p11-kit appears in the gnutls.pc file, it needs to be a propagated
input.

This was a regression introduced in 28a13226fd
which broke things like HTTPS support in curl, which then broke Git clones
from repositories using HTTPS.

* gnu/packages/tls.scm (gnutls)[inputs]: Move p11-kit from here.
[propagated-inputs]: To here.
2020-11-17 21:38:06 +00:00
Efraim Flashner
d4dbcb81bc
gnu: openssl: Fix indentation.
* gnu/packages/tls.scm (openssl): Fix indentation of package definition.
2020-11-08 10:16:41 +02:00
Efraim Flashner
2496b92e6c
gnu: openssl: Fix cross compiling for mips64el-linux.
* gnu/packages/tls.scm (openssl)[arguments]: When cross compiling add
case for mips64el-linux.
2020-11-08 10:10:27 +02:00
Leo Famulari
ad67d20869
gnu: certbot, python-acme: Update to 1.8.0.
* gnu/packages/tls.scm (certbot, python-acme): Update 1.8.0.
2020-10-21 18:32:06 -04:00
Christopher Baines
28a13226fd
gnu: gnutls: Enable p11-kit.
Everywhere except mips64el, where a comment says it doesn't work. I can't test
as I can't build this on mips64el anyway.

This change will enable running the tests for libcacard.

* gnu/packages/tls.scm (gnutls)[arguments]: Only specify --without-p11-kit on
mips64el.
[inputs]: Include the p11-kit for all systems except mips64el.
2020-10-21 18:22:12 +01:00
Maxim Cournoyer
5e2140511c
Merge branch 'staging'
Conflicts:
	gnu/packages/admin.scm
	gnu/packages/commencement.scm
	gnu/packages/gdb.scm
	gnu/packages/llvm.scm
	gnu/packages/package-management.scm
	gnu/packages/tls.scm
2020-10-19 13:11:40 -04:00
Tobias Geerinckx-Rice
1aa375528b
gnu: libressl: Update to 3.1.4.
* gnu/packages/tls.scm (libressl): Update to 3.1.4.
2020-10-16 15:09:52 +02:00
Ludovic Courtès
31b0412870
gnu: openssl@1.1: Update to 1.1.1g and remove replacement.
* gnu/packages/tls.scm (openssl): Update to 1.1.1g.
[replacement]: Remove.
(openssl-1.1.1g): Remove.
2020-10-15 22:12:20 +02:00
Mathieu Othacehe
525a351efa
gnu: gnutls: Fix cross-compilation.
* gnu/packages/tls.scm (gnutls)[arguments]: Disable tests when
cross-compiling.
2020-10-05 11:10:35 +02:00
Ludovic Courtès
0b40d1a3b4
gnu: gnutls: Remove dependency on the Autotools.
This is a followup to 5cf6f6fe7b.

* gnu/packages/tls.scm (gnutls)[arguments]: In 'disable-failing-tests'
phase, change 'tests/fastopen.sh' instead of 'tests/Makefile.am'.
[native-inputs]: Remove AUTOCONF, AUTOMAKE, GETTEXT-MINIMAL, and
LIBTOOL.
2020-09-25 15:15:59 +02:00
Ludovic Courtès
e7ab9c33cc
gnu: gnutls: Enable more testing.
* gnu/packages/tls.scm (gnutls)[native-inputs]: Add NET-TOOLS, IPROUTE,
and SOCAT.
[arguments]: Adjust #:disallowed-references accordingly.
2020-09-25 14:50:56 +02:00
Ludovic Courtès
0e54d63dfa
gnu: gnutls: Update to 3.6.15.
* gnu/packages/tls.scm (gnutls): Update to 3.6.15.
[replacement]: Remove.
(gnutls-3.6.14): Remove.
* gnu/packages/vpn.scm (openconnect)[inputs]: Adjust accordingly.
* gnu/packages/package-management.scm (guix)[propagated-inputs]:
Likewise.
2020-09-25 14:50:02 +02:00
Maxim Cournoyer
5cf6f6fe7b
gnu: gnutls: Fix build.
Fixes <http://issues.guix.gnu.org/43561>.

* gnu/packages/tls.scm (gnutls)[phases]{disable-failing-tests}: Add phase.
[native-inputs]: Add autoconf, automake, gettext-minimal, libtool and texinfo.
2020-09-23 22:41:06 -04:00
Tobias Geerinckx-Rice
149d91814c
gnu: p11-kit: Update to 0.23.21.
* gnu/packages/tls.scm (p11-kit): Update to 0.23.21.
2020-08-20 21:17:03 +02:00
Tobias Geerinckx-Rice
5cdb25c686
gnu: mbedtls-apache-for-hiawatha: Fix.
There's already a custom embedtls-apache variant for Hiawatha.
Fix it instead of enabling threading for embedtls-apache.

* gnu/packages/tls.scm (embedtls-for-hiawatha): Fix usage of
SUBSTITUTE-KEYWORD-ARGUMENTS.  Disable -Wformat-signedness.
(embedtls-for-hiawatha): Remove ‘enable-features’ phase.
2020-07-14 03:57:05 +02:00
Tobias Geerinckx-Rice
927ecd4ebe
gnu: mbedtls-apache: Update to 2.23.0 [security fixes].
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.23.0.
[source]: Use GIT-FETCH and GIT-FILE-NAME.
[arguments]: Make source files writable.  Enable threading.
2020-07-14 03:25:04 +02:00
Ludovic Courtès
9015ed6688
gnu: gnutls: Pass #:tests? unconditionally.
* gnu/packages/tls.scm (gnutls)[arguments]: Add #:tests? unconditionally.
2020-06-20 23:36:02 +02:00
Ludovic Courtès
9ee8b41f2b
gnu: gnutls: Leave #:disallowed-references empty for GNU/Hurd.
Partly fixes <https://bugs.gnu.org/41775>.

This is a followup to a9bcc64746.

* gnu/packages/tls.scm (gnutls)[arguments]: Let #:disallowed-references
empty when 'hurd-target?' returns true.
2020-06-20 23:36:01 +02:00
Marius Bakke
8951b9496b
gnu: GnuTLS: Update replacement to 3.6.14 [fixes CVE-2020-13777].
* gnu/packages/tls.scm (gnutls-3.6.13): Rename to ...
(gnutls-3.6.14): ... this.  Update to 3.6.14.
(gnutls)[replacement]: Adjust accordingly.
* gnu/packages/package-management.scm (guix)[propagated-inputs]: Likewise.
* gnu/packages/vpn.scm (openconnect)[propagated-inputs]: Likewise.
2020-06-06 15:35:41 +02:00
Tobias Geerinckx-Rice
5c5bd76f31
gnu: openconnect: Add a comment about the gnutls version.
* gnu/packages/vpn.scm (openconnect): Add said comment.
* gnu/packages/tls.scm (gnutls): Add backlink to optimise SEO.
2020-06-06 15:24:26 +02:00
Leo Famulari
db38840198
Revert some Go package updates.
This reverts commit 5f833e0495 through
681ac9a66c.

It's not idiomatic to update Go packages independently of their users.
This reversion was approved by Efraim on #guix:

http://logs.guix.gnu.org/guix/2020-05-26.log

* gnu/packages/golang.scm,
gnu/packages/syncthing.scm,
gnu/packages/tls.scm: Revert.
2020-05-27 15:03:03 -04:00
Efraim Flashner
1e07bd2aa7
gnu: go-github-com-certifi-gocertifi: Update to 2020.02.11.
* gnu/packages/tls.scm (go-github-com-certifi-gocertifi): Update to
2020.02.11.
2020-05-26 09:54:33 +03:00
nikita
3c986a7dc2
mailmap: Update entries for Nikita.
* .mailmap: change email and name for Nikita.
* Makefile.am, doc/guix.texi, etc/completion/fish/guix.fish,
gnu/packages/accessibility.scm, gnu/packages/admin.scm,
gnu/packages/audio.scm, gnu/packages/autotools.scm, gnu/packages/cdrom.scm,
gnu/packages/check.scm, gnu/packages/cinnamon.scm,
gnu/packages/compression.scm, gnu/packages/crypto.scm,
gnu/packages/databases.scm, gnu/packages/django.scm, gnu/packages/dns.scm,
gnu/packages/elixir.scm, gnu/packages/emacs-xyz.scm, gnu/packages/emacs.scm,
gnu/packages/enlightenment.scm, gnu/packages/erlang.scm,
gnu/packages/fonts.scm, gnu/packages/fontutils.scm, gnu/packages/forth.scm,
gnu/packages/fvwm.scm, gnu/packages/games.scm, gnu/packages/gl.scm,
gnu/packages/gnome.scm, gnu/packages/gnunet.scm, gnu/packages/gnupg.scm,
gnu/packages/gtk.scm, gnu/packages/guile-wm.scm, gnu/packages/guile-xyz.scm,
gnu/packages/haskell-apps.scm, gnu/packages/haskell-check.scm,
gnu/packages/haskell-crypto.scm, gnu/packages/haskell-xyz.scm,
gnu/packages/haskell.scm, gnu/packages/image-viewers.scm,
gnu/packages/image.scm, gnu/packages/irc.scm, gnu/packages/language.scm,
gnu/packages/libcanberra.scm, gnu/packages/linux.scm,
gnu/packages/lisp-xyz.scm, gnu/packages/lisp.scm, gnu/packages/lolcode.scm,
gnu/packages/lxde.scm, gnu/packages/lxqt.scm, gnu/packages/mail.scm,
gnu/packages/markup.scm, gnu/packages/mate.scm, gnu/packages/maths.scm,
gnu/packages/mc.scm, gnu/packages/messaging.scm, gnu/packages/music.scm,
gnu/packages/ncurses.scm, gnu/packages/networking.scm,
gnu/packages/nickle.scm, gnu/packages/openbox.scm, gnu/packages/pdf.scm,
gnu/packages/perl-check.scm, gnu/packages/perl.scm,
gnu/packages/python-compression.scm, gnu/packages/python-crypto.scm,
gnu/packages/python-web.scm, gnu/packages/python-xyz.scm,
gnu/packages/python.scm, gnu/packages/qt.scm, gnu/packages/ruby.scm,
gnu/packages/rust.scm, gnu/packages/scheme.scm,
gnu/packages/serialization.scm, gnu/packages/shells.scm,
gnu/packages/ssh.scm, gnu/packages/suckless.scm, gnu/packages/tbb.scm,
gnu/packages/telephony.scm, gnu/packages/text-editors.scm,
gnu/packages/textutils.scm, gnu/packages/time.scm, gnu/packages/tls.scm,
gnu/packages/tor.scm, gnu/packages/version-control.scm,
gnu/packages/video.scm, gnu/packages/vim.scm, gnu/packages/web.scm,
gnu/packages/wm.scm, gnu/packages/xdisorg.scm, gnu/packages/xfce.scm,
gnu/packages/xml.scm, gnu/packages/xorg.scm, gnu/services/certbot.scm,
gnu/services/desktop.scm, gnu/services/version-control.scm,
gnu/services/web.scm, guix/import/hackage.scm, guix/licenses.scm: Likewise.

Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2020-05-13 09:30:26 +03:00
Marius Bakke
f7bdc0e902
gnu: mbedtls-apache: Update to 2.16.6.
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.16.6.
2020-05-09 14:37:51 +02:00