tribes/guix
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-04-16 07:10:31 +02:00
Code Activity
160,197 Commits 77 Branches 40 Tags
21d2e4a6321f6eaabc9fb7b0d94dea523737c981
Commit Graph

710 Commits

Author SHA1 Message Date
Greg Hogan
171dbdbc6d gnu: aws-lc: Downgrade to 1.48.5. 
* gnu/packages/tls.scm (aws-lc): Downgrade to 1.48.5.

Change-Id: I9cab7dad39759de7f7aed983fcef1dd5d19e45f3
 2025-04-15 22:55:18 +00:00
Maxim Cournoyer
5533ebf57b gnu: libressl: Add debug output. 
* gnu/packages/tls.scm (libressl) [outputs]: New field.

Change-Id: Ie4949d46d3b9f403b4c87e4f3ae876c40c3032a6
 2025-04-14 10:34:52 +09:00
Maxim Cournoyer
e365a71381 gnu: libressl: Use gexp and drop obsolete workaround. 
All of our kernels are now on the 5.x series, and other systems using 3.x
kernels are EOL.

* gnu/packages/tls.scm (libressl) [#:configure-flags]: Use gexps, and remove
the 'ac_cv_func_getentropy=no' flag.

Change-Id: If82e89d471adf3f6ea5983fa042f03dc5350c0d8
 2025-04-14 10:34:52 +09:00
Ashish SHUKLA
b4a1577c97 gnu: s2n: Update to 1.5.15. 
* gnu/packages/tls.scm (s2n): Update to 1.5.15.

Change-Id: I9d3285c2b58ee789b15a875f9cca3649a4451c67
Signed-off-by: Christopher Baines <mail@cbaines.net>
 2025-04-06 17:16:19 +01:00
Ashish SHUKLA
0b43448b43 gnu: aws-lc: Update to 1.49.1 
* gnu/packages/tls.scm (aws-lc): Update to 1.49.1.
[native-inputs]: Add perl.

Signed-off-by: Christopher Baines <mail@cbaines.net>
 2025-04-06 17:16:19 +01:00
Christopher Baines
91abb6278f gnu: guile-gnutls: Add the debug output. 
So that debug symbols are available for debugging segfaults involving
guile-gnutls.

* gnu/packages/tls.scm (guile-gnutls)[outputs]: Add debug.

Change-Id: Id447147b37ec0af76d0fcd568850d8f45fffa88d
 2025-02-11 10:33:47 +00:00
Zheng Junjie
151128b628 gnu: openssl: Support loongarch64. 
* gnu/packages/tls.scm (target->openssl-target, target->openssl-target): Add
loongarch64 case.

Change-Id: Ie85b4e1f39650f6134c9b5c4c81e0d5f83068558
 2025-01-25 01:05:26 +08:00
Zheng Junjie
2cb1b72a08 gnu: wolfssl: Use G-expressions. 
gnu/packages/tls.scm (wolfssl): Use G-expressions.

Change-Id: I56d995360b50a614a405c4377f0c7714c2522508
 2025-01-07 23:53:29 +08:00
Ashish SHUKLA
bf43a739dd gnu: wolfssl: Update to 5.7.6. 
* gnu/packages/tls.scm (wolfssl): Update to 5.7.6.

Change-Id: Ibe9274f032bc4e5757534e01b7d8d1603f69efdc
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
 2025-01-07 23:53:29 +08:00
Ashish SHUKLA
09228a0ce8 gnu: libressl: Update to 4.0.0. 
Test certificate is updated upstream, so no need for a hack anymore.

* gnu/packages/tls.scm (libressl): Update to 4.0.0.
[native-inputs]: Remove. [arguments]<phases>: Remove.

Change-Id: Ib22aae8e48af4b4f9b5039283e563b419e629cf0
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
 2024-12-26 23:26:15 +01:00
Janneke Nieuwenhuizen
82e8ef994c gnu: openssl-3.0: Support the 64bit Hurd. 
* gnu/packages/patches/openssl-hurd64.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/tls.scm (openssl-3.0)[arguments]: When building for the 64bit
Hurd, use it in new "apply-hurd-patch" phase.  In #:configure-flags use
"hurd-x86_64" for the 64bit Hurd.

Change-Id: I8936377da726681b748cc010e1fbae3fb19dee05
 2024-12-03 08:39:00 +01:00
Ludovic Courtès
79be44fb51 gnu: gnutls: Change release monitoring URL. 
* gnu/packages/tls.scm (gnutls)[properties]: Change release monitoring
URL.  Add ‘upstream-name’.

Change-Id: If6ee941246b130914ddf7ca11c074a9547b9d739
 2024-12-01 20:14:16 +01:00
Ashish SHUKLA
4b39db3c38 gnu: wolfssl: Update to 5.7.4. 
* gnu/packages/tls.scm (wolfssl): Update to 5.7.4.

Change-Id: I1438599e3febd71e50ae690f168b7bf12896223a
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
 2024-11-28 14:19:50 +08:00
Efraim Flashner
a26ba23cdd gnu: s2n: Support all 64-bit systems. 
* gnu/packages/tls.scm (s2n)[supported-systems]: Expand to all 64-bit
systems supported in Guix.

Change-Id: Ide97bf8e5ec5090c4fb740c90cf0ec2aee4a3771
 2024-11-03 12:36:44 +02:00
Nicolas Graves
571f1b9c01 gnu: wolfssl: Update to 5.7.2. [security fixes] 
This fixes CVE-2022-42905, CVE-2023-3724, CVE-2024-1543, CVE-2024-5991.

* gnu/packages/tls.scm (wolfssl): Update to 5.7.2.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
 2024-10-11 13:40:57 +01:00
Greg Hogan
44aba54ed3 gnu: s2n: Update to 1.5.1. 
* gnu/packages/tls.scm (s2n): Update to 1.5.1.
[arguments]: Re-enable warnings as errors.
[supported-systems]: Restrict to 64-bit systems.

Change-Id: I09d690c96789961473c846eb8174ddc8a2b1ad4e
 2024-09-28 00:20:19 +02:00
Greg Hogan
eb4b4f3e32 gnu: aws-lc: Update to 1.34.2. 
* gnu/packages/tls.scm (aws-lc): Update to 1.34.2.
[native-inputs]: Remove libfaketime.
[arguments]<#:configure-flags>: Disable Go.
<#:phases>: Remove overwritten 'check phase.

Change-Id: Ib15fc22d0660ad805395acbec6fc45a63079b6f4
 2024-09-28 00:20:19 +02:00
Ludovic Courtès
ccb4a92c34 gnu: openssl@1.1: Ungraft. 
* gnu/packages/tls.scm (openssl-1.1): Update to 1.1.1u.
[replacement]: Remove.
(openssl/fixed): Remove.

Change-Id: Idd77b57276ea132eee8c2c3fe801150c7789ac59
 2024-08-31 10:44:16 +02:00
Ludovic Courtès
052d12f040 gnu: guile-gnutls: Update to 4.0.0. 
* gnu/packages/tls.scm (guile-gnutls): Update to 4.0.0.
[source]: Remove “gnutls-cross.patch”.
[arguments]: Add #:make-flags.
* gnu/packages/patches/gnutls-cross.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

Change-Id: Ic4432e2d5ca37af5aa20cdf7e4e456afe2b37537
 2024-08-31 10:44:16 +02:00
Ludovic Courtès
671db7471e gnu: gnutls: Ungraft. 
* gnu/packages/tls.scm (gnutls): Update to 3.8.3.
[replacement]: Remove.
[home-page]: Adjust.
(gnutls/fixed): Remove.

Change-Id: I592161764ca152140c777625ea6165ca0e31af03
 2024-08-31 10:42:49 +02:00
Christopher Baines
832eec2a74 gnu: tls: Raise conditions from target->openssl-target. 
Rather than rasising generic errors.

* gnu/packages/tls.scm (target->openssl-target): Raise conditions rather than
generic errors.
(openssl-1.1): Call target->openssl-target with the package.

Change-Id: I13c63328cdf6bc177b20879805246ad94ff2665b
 2024-07-15 22:34:24 +01:00
Ludovic Courtès
a24e8de6ce gnu: libressl: Run tests under ‘datefudge’. 
Fixes <https://issues.guix.gnu.org/71491>.

* gnu/packages/tls.scm (libressl)[arguments]: Add #:phases.

Change-Id: I85d866808a01265c90de6c662f35a083773faf08
 2024-06-11 23:09:08 +02:00
Christopher Baines
f6c6dd229f gnu: guile-gnutls: Update to 4.0.0. 
* gnu/packages/tls.scm (guile-gnutls): Update to 4.0.0.

Change-Id: I7ced2e1309364c990907fafc489917fcd56fa103
 2024-04-30 17:58:35 +01:00
Hilton Chain
06331aec11 gnu: Add mbedtls, version 3.5.2. 
* gnu/packages/tls.scm (mbedtls): New variable.

Change-Id: I09c86ce04734bd5b44441d7749688a5c39389ece
 2024-02-05 13:56:37 +08:00
Hilton Chain
2b296427d7 gnu: mbedtls-apache: Rename to mbedtls-lts. 
* gnu/packages/tls.scm (mbedtls-apache): Rename package to "mbedtls".
Rename variable to…
(mbedtls-lts): …this.
(mbedtls-apache): Define as deprecated by mbedtls-lts.
(mbedtls-for-hiawatha): Adjust accordingly.
* doc/guix.texi: Likewise.
* gnu/packages/emulators.scm (dolphin-emu,retroarch)[inputs]: Likewise.
* gnu/packages/game-development.scm (godot-lts,godot)[inputs]: Likewise.
* gnu/packages/hardware.scm (hueplusplus,openrgb)[inputs]: Likewise.
* gnu/packages/haxe.scm (neko,haxe,hashlink)[inputs]: Likewise.
* gnu/packages/irc.scm (inspircd)[inputs]: Likewise.
* gnu/packages/julia-jll.scm (julia-mbedtls-jll)[arguments]<#:phases>,[inputs]:
Likewise.
* gnu/packages/julia.scm (julia)[arguments]<#:phases>,[inputs]: Likewise.
* gnu/packages/linphone.scm (bctoolbox)[inputs]: Likewise.
* gnu/packages/linux.scm (dislocker)[inputs]: Likewise.
* gnu/packages/networking.scm (nng)[inputs]: Likewise.
* gnu/packages/search.scm (dataparksearch)[inputs]: Likewise.
* gnu/packages/video.scm (obs)[inputs]: Likewise.
* gnu/packages/web.scm (hiawatha)[arguments]<#:phases>: Likewise.

Change-Id: I0c58b3cd0bcf6e44e7b16a69f6d2739aa3c1545b
 2024-02-05 13:56:31 +08:00
Hilton Chain
0f86c1c6f8 gnu: mbedtls-apache: Use gexps. 
* gnu/packages/tls.scm (mbedtls-apache)[arguments]: Use gexps.

Change-Id: Idefca03b8eea0d3f18497afccc4a3a081caac87e
 2024-02-05 13:56:26 +08:00
Hilton Chain
585d71ce96 gnu: mbedtls-apache: Update to 2.28.7. 
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.28.7.
[license]: Add gpl2+.

Change-Id: I946aa1436214a11ab3faa08b3ddf9c937a0462a9
 2024-02-05 13:56:20 +08:00
Hilton Chain
a13a0e00ea gnu: mbedtls-for-hiawatha: Update package style. 
* gnu/packages/tls.scm (mbedtls-for-hiawatha)[arguments]: Use gexps.
Remove trailing #t.

Change-Id: I0af54b6fb7319bc811ce38c001b47686fb45b1bd
 2024-02-05 13:56:14 +08:00
Hilton Chain
8dfaf461b4 gnu: mbedtls-for-hiawatha: Use inherited source. 
* gnu/packages/tls.scm (mbedtls-for-hiawatha): Use inherited source.
[arguments]<#:phases>: Keep "-Wformat-signedness".

Change-Id: I562ae6533b518a853b9b59f8fb69c0135364277f
 2024-02-05 13:56:08 +08:00
Jack Hill
856b4a603a gnu: gnutls: Update to 3.8.3 [security-fixes]. 
Fixes CVE-2024-0553 and CVE-2024-0567.

gnu/packages/tls.scm (gnutls-3.8.2): Rename to ...
(gnutls/fixed): ... this.  Update to 3.8.3.
(gnutls): Rename replacement to gnutls/fixed.

Change-Id: Ic44b3b0481ffd51cdc42a2d71a598f001b43c6f7
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
Co-authored-by: John Kehayias <john.kehayias@protonmail.com>
 2024-01-20 16:52:05 -05:00
David Thompson
8cc0687778 gnu: Update guile-gnutls to 3.7.14. 
* gnu/packages/tls.scm (guile-gnutls): Update to 3.7.14.

Change-Id: I851cb3554f1dcf5c286c345634ea71c5a7bbd973
 2024-01-11 11:22:36 -05:00
Maxim Cournoyer
deeb7d1f53 gnutls: Update to 3.8.2 (fixes CVE-2023-5981). 
* gnu/packages/tls.scm (gnutls): Graft with gnutls-3.8.2.
(gnutls-3.8.1): Replace with...
(gnutls-3.8.2): ... this.  Remove obsolete set-path-max phase, and make the
variable private.

Change-Id: Ib5cd276c9ecc87d1adc2f4f9633d49676cfe856d
 2024-01-05 13:48:37 -05:00
Efraim Flashner
568c12d726 gnu: openssl: Fix building on x86_64-linux-gnux32. 
* gnu/packages/tls.scm (target->openssl-target): Add entry for
x86_64-linux-gnux32.

Change-Id: Icbbdb76134da0811b8493c55ca2d3acdb77c5883
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
 2024-01-04 21:48:17 +02:00
Efraim Flashner
c7215819e1 Revert "gnu: openssl: Don't error when targeting avr." 
This reverts commit baeff7f546.
 2023-12-12 13:58:16 +02:00
Efraim Flashner
baeff7f546 gnu: openssl: Don't error when targeting avr. 
* gnu/packages/tls.scm (target->openssl-target): Add case for avr.

Change-Id: I1cfc8b50fa4b2b864f8f8aa8898cc405ffc02580
 2023-12-12 09:32:10 +02:00
John Kehayias
e452227a51 gnu: mbedtls-apache: Update to 2.28.5. 
This fixes mbedtls-apache failing some tests for unknown reasons after recent
updates and ungrafting to other packages.  This should soon be renamed to
mbedtls-apache-lts and a newer version added; see
<https://issues.guix.gnu.org/66718>.

* gnu/packages/tls.scm (mbedtls-apache): Update to 2.28.5.

Change-Id: Ie513c11cb60262be9865ebbd1f6238d39f299c42
 2023-11-07 15:12:06 -05:00
Ludovic Courtès
a1ac534f8a gnu: gnutls@3.8: Do not rely expect ‘PATH_MAX’ definition on GNU/Hurd. 
Fixes <https://issues.guix.gnu.org/66691>.

* gnu/packages/tls.scm (gnutls-3.8.1)[arguments]: New field.

Change-Id: If208591d78d5d023220bd3a7e3841af172c605ff
 2023-10-24 00:02:14 +02:00
Christopher Baines
5015491378 gnu: gnutls: Replace with 3.8.1. 
The recommended way to address GNUTLS-SA-2020-07-14 / CVE-2023-0361 is to
upgrade to 3.8.0 or later.

* gnu/packages/tls.scm (gnutls-3.8.1): New variable.
(gnutls)[replacement]: Use it.

Signed-off-by: Christopher Baines <mail@cbaines.net>
 2023-10-20 11:38:00 +01:00
Ludovic Courtès
51e1df07b1 gnu: openssl@1.1: Upgrade replacement to 1.1.1u. 
Includes fixes for CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465,
CVE-2023-0466, CVE-2023-2650, CVE-2022-4304, CVE-2022-4450.

* gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1u.

Co-authored-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
 2023-09-28 11:44:08 +02:00
Ludovic Courtès
e67cb380f7 gnu: openssl@1.1: Really replace with fixed version. 
The ‘replacement’ field of ‘openssl-1.1’ was apparently lost in a
previous merge commit ca. Jan. 2023; consequently, ‘openssl/fixed’ was
unused.

* gnu/packages/tls.scm (openssl-1.1)[replacement]: New field.
 2023-09-28 11:44:08 +02:00
Tobias Geerinckx-Rice
310b0f72d8 gnu: libressl: Update to 3.7.3 [fixes CVE-2023-35784]. 
Thanks to Dennis 'GNUtoo' Carikli for <https://issues.guix.gnu.org/64982>,
but upgrading to 3.8.0 breaks (at least) OpenSMTPd.

* gnu/packages/tls.scm (libressl): Update to 3.7.3.
 2023-08-13 02:00:00 +02:00
Janneke Nieuwenhuizen
fb6f94864d gnu: openssl-1.1: Fix shared build for the Hurd. 
* gnu/packages/tls.scm (openssl-1.1)[arguments]: When building for the Hurd,
add phase 'patch-configure'.
(openssl)[arguments]: And delete it again.
 2023-07-20 10:11:35 +02:00
Janneke Nieuwenhuizen
378766dd2e gnu: openssl: Build fix for the Hurd. 
* gnu/packages/tls.scm (openssl-3.0)[arguments]: When building on the Hurd,
add "hurd-x86" to #:configure-flags.
 2023-07-20 10:11:33 +02:00
Greg Hogan
7e60061da3 gnu: aws-lc: Fix tests. 
* gnu/packages/tls.scm (aws-lc)[native-inputs]: Add libfaketime.
[arguments]<#:phases>: Replace and wrap 'check with faketime due to
certificate expiration.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
 2023-06-25 23:46:04 +02:00
Janneke Nieuwenhuizen
ff690faf66 gnu: Use target-hurd?, system-hurd? instead of hurd-target?, hurd-system?. 
* gnu/packages/hurd.scm (hurd-target?): Remove.
(hurd-system?): Move to...
* guix/utils.scm (system-hurd?): ...here.
* gnu/packages/*: Update all users, removing (gnu packages hurd) include where
now unused.
 2023-06-17 14:38:32 +02:00
Ludovic Courtès
468b5d9548 gnu: guile-gnutls: Fix cross-compilation. 
The patch was inadvertently removed in
5e1e674421.

* gnu/packages/tls.scm (guile-gnutls)[source]: Re-add 'gnutls-cross.patch'.
 2023-05-11 13:21:45 +02:00
Christopher Baines
5e1e674421 gnu: guile-gnutls: Update to 3.7.12. 
* gnu/packages/tls.scm (guile-gnutls): Update to 3.7.12.
[source]: Switch to a tarball, to avoid a circular dependency if guile-gnutls
is used in git-download.
[arguments]: Remove phase changes for building from Git.
[native-inputs]: Remove autoconf and automake as they're now unnecessary.

Signed-off-by: Christopher Baines <mail@cbaines.net>
 2023-05-10 10:41:03 +01:00
Efraim Flashner
e287a0e402 gnu: gnutls: Don't embed a phase inside another phase. 
* gnu/packages/tls.scm (gnutls)[arguments]: Adjust powerpc-linux phase
'increase-test-timeout to not be embedded inside another phase.
 2023-04-25 23:32:17 +03:00
Efraim Flashner
52f6ccef82 gnu: perl-crypt-openssl-rsa: Update to 0.33. 
* gnu/packages/tls.scm (perl-crypt-openssl-rsa): Update to 0.33.
 2023-04-25 20:42:22 +03:00
Efraim Flashner
f2107eb221 gnu: gnutls: Extend test timeout on powerpc-linux. 
* gnu/packages/tls.scm (gnutls)[arguments]: When building for
powerpc-linux add a phase to extend the test timeout.
 2023-04-19 20:24:29 -04:00