summaryrefslogtreecommitdiff
path: root/gnu/packages/tls.scm
AgeCommit message (Collapse)Author
2023-09-28gnu: openssl@1.1: Upgrade replacement to 1.1.1u.Ludovic Courtès
Includes fixes for CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-2650, CVE-2022-4304, CVE-2022-4450. * gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1u. Co-authored-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
2023-09-28gnu: openssl@1.1: Really replace with fixed version.Ludovic Courtès
The ‘replacement’ field of ‘openssl-1.1’ was apparently lost in a previous merge commit ca. Jan. 2023; consequently, ‘openssl/fixed’ was unused. * gnu/packages/tls.scm (openssl-1.1)[replacement]: New field.
2023-08-13gnu: libressl: Update to 3.7.3 [fixes CVE-2023-35784].Tobias Geerinckx-Rice
Thanks to Dennis 'GNUtoo' Carikli for <https://issues.guix.gnu.org/64982>, but upgrading to 3.8.0 breaks (at least) OpenSMTPd. * gnu/packages/tls.scm (libressl): Update to 3.7.3.
2023-07-20gnu: openssl-1.1: Fix shared build for the Hurd.Janneke Nieuwenhuizen
* gnu/packages/tls.scm (openssl-1.1)[arguments]: When building for the Hurd, add phase 'patch-configure'. (openssl)[arguments]: And delete it again.
2023-07-20gnu: openssl: Build fix for the Hurd.Janneke Nieuwenhuizen
* gnu/packages/tls.scm (openssl-3.0)[arguments]: When building on the Hurd, add "hurd-x86" to #:configure-flags.
2023-06-25gnu: aws-lc: Fix tests.Greg Hogan
* gnu/packages/tls.scm (aws-lc)[native-inputs]: Add libfaketime. [arguments]<#:phases>: Replace and wrap 'check with faketime due to certificate expiration. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2023-06-17gnu: Use target-hurd?, system-hurd? instead of hurd-target?, hurd-system?.Janneke Nieuwenhuizen
* gnu/packages/hurd.scm (hurd-target?): Remove. (hurd-system?): Move to... * guix/utils.scm (system-hurd?): ...here. * gnu/packages/*: Update all users, removing (gnu packages hurd) include where now unused.
2023-05-11gnu: guile-gnutls: Fix cross-compilation.Ludovic Courtès
The patch was inadvertently removed in 5e1e67442188ccca8db8c1dd092efbc6fc2c33dc. * gnu/packages/tls.scm (guile-gnutls)[source]: Re-add 'gnutls-cross.patch'.
2023-05-10gnu: guile-gnutls: Update to 3.7.12.Christopher Baines
* gnu/packages/tls.scm (guile-gnutls): Update to 3.7.12. [source]: Switch to a tarball, to avoid a circular dependency if guile-gnutls is used in git-download. [arguments]: Remove phase changes for building from Git. [native-inputs]: Remove autoconf and automake as they're now unnecessary. Signed-off-by: Christopher Baines <mail@cbaines.net>
2023-04-25gnu: gnutls: Don't embed a phase inside another phase.Efraim Flashner
* gnu/packages/tls.scm (gnutls)[arguments]: Adjust powerpc-linux phase 'increase-test-timeout to not be embedded inside another phase.
2023-04-25gnu: perl-crypt-openssl-rsa: Update to 0.33.Efraim Flashner
* gnu/packages/tls.scm (perl-crypt-openssl-rsa): Update to 0.33.
2023-04-19gnu: gnutls: Extend test timeout on powerpc-linux.Efraim Flashner
* gnu/packages/tls.scm (gnutls)[arguments]: When building for powerpc-linux add a phase to extend the test timeout.
2023-04-18gnu: openssl: Update cross-configure target for riscv64-linux .Efraim Flashner
* gnu/packages/tls.scm (target->openssl-target): When building for riscv64-linux use architecture specific configurations.
2023-03-20Merge remote-tracking branch 'origin/master' into core-updatesAndreas Enge
2023-03-17gnu: guile-gnutls: Do not expect gnulib shebangs to work.Vivien Kraus
* gnu/packages/tls.scm (guile-gnutls) [phase patch-more-shebangs]: Fix how autogen.sh invokes gnulib-tool, and how configure.ac invokes git-version-gen, so as not to rely on shebangs. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2023-03-02Merge remote-tracking branch 'savannah/master' into core-updatesChristopher Baines
Conflicts: gnu/local.mk gnu/packages/autotools.scm gnu/packages/cmake.scm gnu/packages/gnuzilla.scm gnu/packages/haskell.scm gnu/packages/pdf.scm gnu/packages/python-xyz.scm gnu/packages/samba.scm gnu/packages/tex.scm gnu/packages/tls.scm gnu/packages/wxwidgets.scm
2023-02-26gnu: openssl-1.1: Specify TESTS Make variable via #:make-flags.Maxim Cournoyer
* gnu/packages/tls.scm (openssl-1.1) [make-flags]: New field. [phases] {check}: Remove phase override.
2023-02-26gnu: openssl-1.1: Clean-up definition.Maxim Cournoyer
* gnu/packages/tls.scm (openssl-1.1): Do not quasiquote arguments. Remove extraneous let-bound variables and use more gexp variables.
2023-02-26gnu: gnutls: Deprecate 'gnutls-latest'.Ludovic Courtès
* gnu/packages/tls.scm (gnutls-latest): Define as a deprecated alias for 'gnutls'. (guile-gnutls)[inputs, native-inputs]: Replace 'gnutls-latest' with 'gnutls'.
2023-02-26gnu: gnutls: Remove Guile dependency.Ludovic Courtès
* gnu/packages/tls.scm (gnutls)[arguments]: Remove --with-guile-* configure flags. [native-inputs]: Remove GUILE-3.0. [inputs]: Likewise, and add LIBUNISTRING. (gnutls-latest)[inputs, native-inputs]: Remove. (guile2.2-gnutls): Rewrite as a variant of GUILE-GNUTLS.
2023-03-02gnu: python-acme, certbot: Update to 2.3.0.Jack Hill
* gnu/packages/tls.scm (python-acme): Update to 2.3.0. (certbot)[source]: Update hash. [propagated-inputs]: Remove python-zope-interface and python-zope-component. Signed-off-by: Leo Famulari <leo@famulari.name>
2023-02-17gnu: p11-kit-next: Switch to meson-build-system.Vivien Kraus
README.md says to use meson to build. * gnu/packages/tls.scm (p11-kit-next)[build-system]: Use meson-build-system. [arguments]: Adjust accordingly. Signed-off-by: Christopher Baines <mail@cbaines.net>
2023-02-11gnu: OpenSSL 3: Update to 3.0.8 [security fixes].Leo Famulari
Fixes CVE-2023-0215, CVE-2023-0216, CVE-2023-0217, CVE-2023-0286, CVE-2023-0401, CVE-2022-4203, CVE-2022-4304, and CVE-2022-4450. https://www.openssl.org/news/secadv/20230207.txt gnu/packages/tls.scm (openssl-3.0): Update to 3.0.8.
2023-02-11gnu: OpenSSL: Update to 1.1.1t [security fixes].Leo Famulari
Fixes CVE-2023-0215, CVE-2023-0286, CVE-2022-4304, CVE-2022-4450. https://www.openssl.org/news/secadv/20230207.txt * gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1t.
2023-01-30Merge remote-tracking branch 'origin/master' into core-updatesEfraim Flashner
Conflicts: doc/guix.texi gnu/local.mk gnu/packages/admin.scm gnu/packages/base.scm gnu/packages/chromium.scm gnu/packages/compression.scm gnu/packages/databases.scm gnu/packages/diffoscope.scm gnu/packages/freedesktop.scm gnu/packages/gnome.scm gnu/packages/gnupg.scm gnu/packages/guile.scm gnu/packages/inkscape.scm gnu/packages/llvm.scm gnu/packages/openldap.scm gnu/packages/pciutils.scm gnu/packages/ruby.scm gnu/packages/samba.scm gnu/packages/sqlite.scm gnu/packages/statistics.scm gnu/packages/syndication.scm gnu/packages/tex.scm gnu/packages/tls.scm gnu/packages/version-control.scm gnu/packages/xml.scm guix/build-system/copy.scm guix/scripts/home.scm
2023-01-22gnu: guile-gnutls: Use gnutls-latest consistently.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (guile-gnutls)[native-inputs]: Substitute gnutls-latest for gnutls. Reported by jackhill in #guix.
2023-01-15gnu: guile-gnutls: Update to 3.7.11.Vivien Kraus
* gnu/packages/tls.scm (guile-gnutls) [phases]: Patch-shebang autopull.sh and autogen.sh. [native-inupts]: Add gnulib and git. Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
2022-12-13gnu: guile-gnutls: Add properties for the 'generic-git' updater.Ludovic Courtès
* gnu/packages/tls.scm (guile-gnutls)[properties]: New field.
2022-12-08gnu: julia: Update to 1.8.3.Efraim Flashner
* gnu/packages/julia.scm (julia): Update to 1.8.3. [source]: Remove one patch. [arguments]: Adjust 'prepare-deps phase to changes in inputs. Remove custom 'use-system-libwhich, 'change-number-of-precompiled-statements, 'symlink-libraries phases. In 'fix-include-and-link-paths phase remove substitution for utf8proc linking and adjust libuv linking. Fix reference to shell in 'replace-default-shell phase. Adjust the 'shared-objects-path phase to changes in the source. Change the 'enable-parallel-tests phase for upstream changes. Adjust the 'adjust-test-suite phase to be more robust. Change the 'disable-broken-tests phase to help the test suite pass. Rename 'symlink-llvm-utf8proc phase to 'symlink-missing-libraries and add two more. Adjust make-flags for changes in shared system libraries. Reorder make-flags to changes in the source. Except for aarch64, use the defaults for choosing to use 64-bit blas. [inputs]: Add libblastrampoline. Replace libgit-1.1 with libgit-1.3, utf8proc-2.7.1 with utf8proc-2.8.0. [native-inputs]: Replace python-2 with python. (libunwind-julia): Update to 1.5.0. [source]: Update patches. * gnu/packages/libevent.scm (libuv-julia): Update to 2.0.0-4.e6f0e49. [arguments]: Also build static library, build position-independent-code. * gnu/packages/llvm.scm (llvm-julia): Update to llvm-13, following upstream's build instructions. * gnu/packages/maths.scm (openlibm): Update to 0.8.1. * gnu/packages/textutils.scm (utf8proc-2.7.1): Update and rename to utf8proc-2.8.0. [native-inputs]: Update unicode to 14.0.0. * gnu/packages/tls.scm (mbedtls-apache): Update to 2.28.0. [source]: Remove snippet. [arguments]: Remove trailing #t from phases. * gnu/packages/patches/julia-allow-parallel-build.patch, (julia-patch): Update version string to 1.8.2. gnu/packages/patches/libunwind-julia-fix-GCC10-fno-common.patch: Remove files. * gnu/local.mk (dist_patch_DATA): Remove them. Co-authored-by: Akira Kyle <akira@akirakyle.com>
2022-11-22gnu: Remove acme-client.Marius Bakke
This package does not build and has been unmaintained since 2018: https://github.com/kristapsdz/acme-client-portable/commit/ba153daacb62d8a24fef6d6a5a737d2eff607509 * gnu/packages/tls.scm (acme-client): Remove variable.
2022-11-09gnu: libressl: Update to 3.6.1.Efraim Flashner
* gnu/packages/tls.scm (libressl): Update to 3.6.1.
2022-10-30gnu: openssl: Update to 1.1.1s.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (openssl): Update to 1.1.1s.
2022-10-30gnu: openssl: Update to 3.0.7 [fixes CVE-2022-3786, CVE-2022-3602].Tobias Geerinckx-Rice
* gnu/packages/tls.scm (openssl): Update to 3.0.7.
2022-10-30gnu: dehydrated: Don't rely on implicit input labels.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (dehydrated)[arguments]: Use SEARCH-INPUT-FILE instead of ASSOC-REF.
2022-10-30gnu: dehydrated: Update to 0.7.1.Tobias Geerinckx-Rice
It's a Halloween miracle. * gnu/packages/tls.scm (dehydrated): Update to 0.7.1. [inputs]: Add util-linux+udev.
2022-10-23gnu: dehydrated: ‘Build’ reproducibly.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (dehydrated)[arguments]: Invoke gzip with ‘-n’.
2022-10-23gnu: dehydrated: Use G-expressions.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (dehydrated)[arguments]: Rewrite as G-expressions.
2022-10-23gnu: dehydrated: Update to 0.7.0-0.6fb8eba.Tobias Geerinckx-Rice
* gnu/packages/tls.scm (dehydrated): Update to 0.7.0-0.6fb8eba. [source]: Use GIT-FETCH & GIT-FILE-NAME. [arguments]: Adjust accordingly. Don't explicitly return #t from phases. [native-inputs]: Remove tar.
2022-10-18gnu: wolfssl: Update to 5.5.1 [security fixes].Felix Lechner
* gnu/packages/tls.scm (wolfssl): Update to 5.5.1. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2022-10-18gnu: gnutls-latest: Remove dependency on Guile.Ludovic Courtès
* gnu/packages/tls.scm (gnutls-latest)[inputs]: Remove 'guile' and add 'libunistring'. [native-inputs]: Remove 'guile'.
2022-10-18gnu: guile-gnutls: Fix cross-crompilation.Ludovic Courtès
* gnu/packages/tls.scm (guile-gnutls)[source]: Add "gnutls-cross.patch". [native-inputs]: Add 'gnutls'. [inputs]: Add 'guile-3.0'.
2022-10-17gnu: Add Guile-GnuTLS.Ludovic Courtès
* gnu/packages/tls.scm (guile-gnutls): New variable.
2022-09-18gnu: openssl: Make OpenSSL 3.0 the default.Marius Bakke
* gnu/packages/tls.scm (openssl): Change from OPENSSL-1.1 to OPENSSL-3.0.
2022-09-08Merge branch 'staging' into core-updatesMarius Bakke
2022-09-06gnu: libressl: Fix cross compiling.Efraim Flashner
* gnu/packages/tls.scm (libressl)[arguments]: Don't use deprecated %output symbol.
2022-08-30gnu: GnuTLS: Update to 3.7.7.Marius Bakke
* gnu/packages/tls.scm (gnutls): Update to 3.7.7.
2022-08-30gnu: libtasn1: Update to 4.19.0.Marius Bakke
* gnu/packages/tls.scm (libtasn1): Update to 4.19.0.
2022-08-30Merge branch 'staging' into core-updatesMarius Bakke
2022-08-30gnu: Introduce versioned 'openssl-1.1' variable.Marius Bakke
...and use it in packages that do not yet support 3.0. * gnu/packages/tls.scm (openssl): Rename to ... (openssl-1.1): ... this. (openssl/fixed): Inherit from OPENSSL-1.1. (openssl-3.0): Likewise. (openssl): Turn into alias for OPENSSL-1.1. * gnu/packages/ruby.scm (ruby-2.6)[inputs]: Change from OPENSSL to OPENSSL-1.1. (ruby-3.0)[inputs]: Change "openssl" input to OPENSSL. (ruby-3.1): Inherit from RUBY-3.0. * gnu/packages/python.scm (python-2.7)[inputs]: Change from OPENSSL to OPENSSL-1.1. (python-3.9)[inputs]: Replace "openssl" with OPENSSL. * gnu/packages/python-crypto.scm (python-cryptography)[inputs]: Change from OPENSSL to OPENSSL-1.1. * gnu/packages/databases.scm (mariadb)[inputs]: Likewise. * gnu/packages/node.scm (node)[native-inputs, inputs]: Likewise. (node-lts)[native-inputs]: Likewise.
2022-08-11Merge branch 'staging' into core-updatesMarius Bakke