mirror of
https://git.in.rschanz.org/ryan77627/guix.git
synced 2024-12-25 13:58:15 -05:00
22f25392cf
Fixes CVE-2016-9042 and CVE-2017-{6451,6452,6455,6458,6459,6460,6462,6463,6464} and others. See 'NEWS' in the source code for more information. * gnu/packages/ntp.scm (ntp): Update to 4.2.8p10.
159 lines
6.5 KiB
Scheme
159 lines
6.5 KiB
Scheme
;;; GNU Guix --- Functional package management for GNU
|
||
;;; Copyright © 2014 John Darrington <jmd@gnu.org>
|
||
;;; Copyright © 2014, 2015 Mark H Weaver <mhw@netris.org>
|
||
;;; Copyright © 2015 Taylan Ulrich Bayırlı/Kammer <taylanbayirli@gmail.com>
|
||
;;; Copyright © 2015 Ludovic Courtès <ludo@gnu.org>
|
||
;;; Copyright © 2016 Efraim Flashner <efraim@flashner.co.il>
|
||
;;;
|
||
;;; This file is part of GNU Guix.
|
||
;;;
|
||
;;; GNU Guix is free software; you can redistribute it and/or modify it
|
||
;;; under the terms of the GNU General Public License as published by
|
||
;;; the Free Software Foundation; either version 3 of the License, or (at
|
||
;;; your option) any later version.
|
||
;;;
|
||
;;; GNU Guix is distributed in the hope that it will be useful, but
|
||
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
;;; GNU General Public License for more details.
|
||
;;;
|
||
;;; You should have received a copy of the GNU General Public License
|
||
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
||
|
||
(define-module (gnu packages ntp)
|
||
#:use-module (gnu packages)
|
||
#:use-module (gnu packages base)
|
||
#:use-module (gnu packages linux)
|
||
#:use-module (gnu packages autotools)
|
||
#:use-module (gnu packages pkg-config)
|
||
#:use-module (gnu packages tls)
|
||
#:use-module (gnu packages libevent)
|
||
#:use-module ((guix licenses) #:prefix l:)
|
||
#:use-module (guix packages)
|
||
#:use-module (guix utils)
|
||
#:use-module (guix download)
|
||
#:use-module (guix git-download)
|
||
#:use-module (guix build-system gnu)
|
||
#:use-module (srfi srfi-1))
|
||
|
||
(define-public ntp
|
||
(package
|
||
(name "ntp")
|
||
(version "4.2.8p10")
|
||
(source
|
||
(origin
|
||
(method url-fetch)
|
||
(uri (list (string-append
|
||
"http://archive.ntp.org/ntp4/ntp-"
|
||
(version-major+minor version)
|
||
"/ntp-" version ".tar.gz")
|
||
(string-append
|
||
"https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-"
|
||
(version-major+minor version)
|
||
"/ntp-" version ".tar.gz")))
|
||
(sha256
|
||
(base32
|
||
"17xrk7gxrl3hgg0i73n8qm53knyh01lf0f3l1zx9x6r1cip3dlnx"))
|
||
(modules '((guix build utils)))
|
||
(snippet
|
||
'(begin
|
||
;; Remove the bundled copy of libevent, but we must keep
|
||
;; sntp/libevent/build-aux since configure.ac contains
|
||
;; AC_CONFIG_AUX_DIR([sntp/libevent/build-aux])
|
||
(rename-file "sntp/libevent/build-aux"
|
||
"sntp/libevent:build-aux")
|
||
(delete-file-recursively "sntp/libevent")
|
||
(mkdir "sntp/libevent")
|
||
(rename-file "sntp/libevent:build-aux"
|
||
"sntp/libevent/build-aux")
|
||
#t))))
|
||
(native-inputs `(("which" ,which)
|
||
("pkg-config" ,pkg-config)))
|
||
(inputs
|
||
`(("openssl" ,openssl)
|
||
("libevent" ,libevent)
|
||
;; Build with POSIX capabilities support on GNU/Linux. This allows 'ntpd'
|
||
;; to run as non-root (when invoked with '-u'.)
|
||
,@(if (string-suffix? "-linux"
|
||
(or (%current-target-system) (%current-system)))
|
||
`(("libcap" ,libcap))
|
||
'())))
|
||
(arguments
|
||
`(#:phases
|
||
(modify-phases %standard-phases
|
||
(add-after 'unpack 'disable-network-test
|
||
(lambda _
|
||
(substitute* "tests/libntp/Makefile.in"
|
||
(("test-decodenetnum\\$\\(EXEEXT\\) ") ""))
|
||
#t)))))
|
||
(build-system gnu-build-system)
|
||
(synopsis "Real time clock synchronization system")
|
||
(description "NTP is a system designed to synchronize the clocks of
|
||
computers over a network.")
|
||
(license (l:x11-style
|
||
"http://www.eecis.udel.edu/~mills/ntp/html/copyright.html"
|
||
"A non-copyleft free licence from the University of Delaware"))
|
||
(home-page "http://www.ntp.org")))
|
||
|
||
(define-public openntpd
|
||
(package
|
||
(name "openntpd")
|
||
(version "6.0p1")
|
||
(source (origin
|
||
(method url-fetch)
|
||
;; XXX Use mirror://openbsd
|
||
(uri (string-append
|
||
"http://ftp.openbsd.org/pub/OpenBSD/OpenNTPD/openntpd-"
|
||
version ".tar.gz"))
|
||
(sha256
|
||
(base32
|
||
"1s3plmxmybwpfrimq6sc54wxnn6ca7rb2g5k2bdjm4c88w4q1axi"))))
|
||
(build-system gnu-build-system)
|
||
(home-page "http://www.openntpd.org/")
|
||
(synopsis "NTP client and server by the OpenBSD Project")
|
||
(description "OpenNTPD is the OpenBSD Project's implementation of a client
|
||
and server for the Network Time Protocol. Its design goals include being
|
||
secure, easy to configure, and accurate enough for most purposes, so it's more
|
||
minimalist than ntpd.")
|
||
;; A few of the source files are under bsd-3.
|
||
(license (list l:isc l:bsd-3))))
|
||
|
||
(define-public tlsdate
|
||
(package
|
||
(name "tlsdate")
|
||
(version "0.0.13")
|
||
(home-page "https://github.com/ioerror/tlsdate")
|
||
(source (origin
|
||
(method git-fetch)
|
||
(uri (git-reference
|
||
(commit (string-append "tlsdate-" version))
|
||
(url home-page)))
|
||
(sha256
|
||
(base32
|
||
"0w3v63qmbhpqlxjsvf4k3zp90k6mdzi8cdpgshan9iphy1f44xgl"))
|
||
(file-name (string-append name "-" version "-checkout"))))
|
||
(build-system gnu-build-system)
|
||
(arguments
|
||
'(#:phases (modify-phases %standard-phases
|
||
(add-after 'unpack 'autogen
|
||
(lambda _
|
||
;; The ancestor of 'SOURCE_DATE_EPOCH'; it contains the
|
||
;; date that is recorded in binaries. It must be a
|
||
;; "recent date" since it is used to detect bogus dates
|
||
;; received from servers.
|
||
(setenv "COMPILE_DATE" (number->string 1450563040))
|
||
(zero? (system* "sh" "autogen.sh")))))))
|
||
(inputs `(("openssl" ,openssl)
|
||
("libevent" ,libevent)))
|
||
(native-inputs `(("pkg-config" ,pkg-config)
|
||
("autoconf" ,autoconf)
|
||
("automake" ,automake)
|
||
("libtool" ,libtool)))
|
||
(synopsis "Extract remote time from TLS handshakes")
|
||
(description
|
||
"@command{tlsdate} sets the local clock by securely connecting with TLS
|
||
to remote servers and extracting the remote time out of the secure handshake.
|
||
Unlike ntpdate, @command{tlsdate} uses TCP, for instance connecting to a
|
||
remote HTTPS or TLS enabled service, and provides some protection against
|
||
adversaries that try to feed you malicious time information.")
|
||
(license l:bsd-3)))
|