Commit graph

77 commits

Author SHA1 Message Date
Brian Kubisiak 555ddf0dd7
gnu: nss-certs: Use G-Expression.
* gnu/packages/certs.scm (nss-certs)[arguments]: Use a gexp.

Co-authored-by: Ludovic Courtès <ludo@gnu.org>
2022-05-02 22:22:31 +02:00
Ludovic Courtès 5389c5ea57
gnu: nss-certs: Support cross-compilation.
Reported by phodina <phodina@protonmail.com>.

* gnu/packages/certs.scm (nss-certs)[arguments]: In 'install' phase, do
not refer to '%output' when cross-compiling.
2022-04-18 22:58:06 +02:00
Tobias Geerinckx-Rice ceb9c6c50e
gnu: nss-certs: Avoid top-level reference to NSS.
This is the only hammer I know for dealing with module cycles and
effectively fixes, for example, ‘guix show nss’ today.

It's also a very poor solution.

* gnu/packages/certs.scm (nss-certs)[version, source]: Copy verbatim
from the nss package rather than referring to it at the top level.

Reported by several users of #guix.
2021-12-16 01:55:34 +01:00
Ludovic Courtès 8394619bac
gnu: Simplify package inputs.
This commit was obtained by running:

  ./pre-inst-env guix style

without any additional argument.
2021-12-13 17:48:25 +01:00
Ludovic Courtès 30cc14f140
gnu: certdata2pem: Make public.
This ensures Cuirass builds and has its binary published at
ci.guix.gnu.org.

* gnu/packages/certs.scm (certdata2pem): Make public.
2021-11-22 23:50:56 +01:00
Maxim Cournoyer 8f78f61c02
gnu: nss: Update to 3.71.
This is made in an attempt to get rid of non-deterministic test failures,
namely:

  [  FAILED  ] TlsConnectDatagram13.AeadLimit

* gnu/packages/nss.scm (nss): Update comment about nss-certs.  Update to 3.71.
[phases]{check}: Update faketime date.
[inputs]{sqlite}: Use the regular version.
* gnu/packages/certs.scm (nss-certs): Inherit version and source from nss.
2021-11-11 12:18:21 -05:00
Mathieu Othacehe 287a8c9048
gnu: nss-certs: Copy pem files.
* gnu/packages/certs.scm (nss-certs)[arguments]<#:phases>{install}: Copy pem
files instead of crt files.
2021-09-21 07:41:07 +00:00
Mathieu Othacehe f87b987248
gnu: certdata2pem: Produce pem files.
Create files with pem extension instead of crt.

* gnu/packages/certs.scm (certdata2pem)[arguments]<#:phases>{fix-extension}:
New phase.
2021-09-21 07:41:07 +00:00
Ludovic Courtès 0e47fcced4
Merge branch 'master' into core-updates 2021-07-18 19:50:01 +02:00
Raghav Gururajan acfa55a581
gnu: Add desec-certbot-hook.
* gnu/packages/serts.scm (desec-certbot-hook): New variable.
2021-06-23 12:50:57 -04:00
Marius Bakke 6500c9a5b3
gnu: nss-certs: Do not inherit version and source from nss.
...in order to avoid a top-level variable reference.  This reverts commit
18c38c1898.

* gnu/packages/certs.scm (nss-certs)[version, source]: Do not inherit from NSS.
2021-06-19 17:08:38 +02:00
Marius Bakke 79878c64b4
gnu: nss: Update to 3.66.
* gnu/packages/nss.scm (nss): Update to 3.66.  Reindent.
[arguments]: Remove #:parallel-build?.
* gnu/packages/patches/nss-getcwd-nonnull.patch: Adjust for directory change.
* gnu/packages/patches/nss-3.56-pkgconfig.patch,
gnu/packages/patches/nss-increase-test-timeout.patch: Revert to
6223566971.
* gnu/packages/certs.scm (nss-certs)[arguments]: Adjust for directory change.
2021-06-06 19:49:57 +02:00
Efraim Flashner fcc39864db
Merge remote-tracking branch 'origin/master' into core-updates
Conflicts:
	gnu/local.mk
	gnu/packages/boost.scm
	gnu/packages/chez.scm
	gnu/packages/compression.scm
	gnu/packages/crates-io.scm
	gnu/packages/docbook.scm
	gnu/packages/engineering.scm
	gnu/packages/gcc.scm
	gnu/packages/gl.scm
	gnu/packages/gtk.scm
	gnu/packages/nettle.scm
	gnu/packages/python-check.scm
	gnu/packages/python-xyz.scm
	gnu/packages/radio.scm
	gnu/packages/rust.scm
	gnu/packages/sqlite.scm
	guix/build-system/node.scm
2021-04-16 14:39:48 +03:00
Leo Famulari 15de49e60b
gnu: le-certs: Update to new Let's Encrypt certificates.
* gnu/packages/certs.scm (le-certs): Update the certificate store.
[inputs]: Add isrgrootx2.pem, letsencryptauthorityr3.pem,
letsencryptauthorityr4.pem, letsencryptauthoritye1.pem, and
letsencryptauthoritye2.pem. Remove letsencryptauthorityx3.pem and
letsencryptauthorityx4.pem.
[arguments]: Adjust the builder accordingly.
2021-04-13 13:46:24 -04:00
Efraim Flashner 11a7bfbc46
gnu: certdata2pem: Fix cross compiling.
* gnu/packages/certs.scm (certdata2pem)[arguments]: Use cc-for-target.
2021-01-27 20:59:53 +02:00
Efraim Flashner 1001baa1e8
gnu: certdata2pem: Fix source URI.
* gnu/packages/certs.scm (certdata2pem)[source]: Download just the source.
2021-01-27 17:12:10 +02:00
Efraim Flashner c643e6ca43
gnu: certs.scm: Add missing import.
* gnu/packages/certs.scm: Use (gnu packages perl).
2021-01-27 16:59:37 +02:00
Maxim Cournoyer 9e804e3880
gnu: nss-certs: Remove Python 2 and Perl build dependencies.
* gnu/packages/certs.scm (certdata2pem): Swap package to a C variant.
(nss-certs): Use 'openssl rehash' instead of the Perl 'c_rehash' script.
Adjust for the new certdata2pem program.  The number of certificates installed
compared to when using the previous script remains unchanged (139 at the time
of this commit).
2021-01-27 09:46:22 -05:00
Maxim Cournoyer 18c38c1898
gnu: nss-certs: Sync with the sources used for nss.
* gnu/packages/certs.scm (nss-certs)[version]: Reuse nss version.
[source]: Reuse nss source.
[phases]{install}: Adjust for the new NSS source files hierarchy.  Remove
trailing #t.
2021-01-27 09:30:16 -05:00
Marius Bakke 6223566971
gnu: nss, nss-certs: Update to 3.59.
* gnu/packages/nss.scm (nss): Update to 3.59.
* gnu/packages/certs.scm (nss-certs): Likewise.
2020-12-13 21:44:09 +01:00
Marius Bakke b6fc2054dc
gnu: nss, nss-certs: Update to 3.57.
* gnu/packages/patches/nss-pkgconfig.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/certs.scm (nss-certs): Update to 3.57.
* gnu/packages/nss.scm (nss): Likewise.
[source](patches): Replace nss-pkgconfig.patch with nss-3.56-pkgconfig.patch.
(nss-3.57): Remove variable.
* gnu/packages/gnuzilla.scm (icedove)[inputs]: Change from NSS-3.57 to NSS.
2020-10-13 23:48:13 +02:00
Marius Bakke 4c19be1485
gnu: NSS: Update to 3.55 [security fixes].
This release fixes CVE-2020-6829, CVE-2020-12400, CVE-2020-12401, and
CVE-2020-12403.

* gnu/packages/patches/nss-pkgconfig.patch: Adjust patch context.
* gnu/packages/nss.scm (nss): Update to 3.55.
[arguments]: Add "all" to #:make-flags.  Remove obsolete deletions.
* gnu/packages/certs.scm (nss-certs): Update to 3.55.
2020-07-25 16:16:06 +02:00
Marius Bakke 8ab211dbdb
gnu: NSS: Update to 3.52.1 [fixes CVE-2020-12399].
* gnu/packages/nss.scm (nss): Update to 3.52.1.
* gnu/packages/certs.scm (nss-certs): Likewise.
2020-05-26 22:32:56 +02:00
Marius Bakke 8aeef3c7bd
gnu: NSS: Update to 3.52.
* gnu/packages/nss.scm (nss): Update to 3.52.
* gnu/packages/certs.scm (nss-certs): Likewise.
2020-05-26 22:32:55 +02:00
Marius Bakke 3941af527d
Merge branch 'master' into staging 2020-02-24 19:37:03 +01:00
Tobias Geerinckx-Rice 505b2631a9
gnu: le-certs: Update input hashes.
These unversioned files were modified upstream.  The result of

  $ openssl x509 -in <FILE> -text

for each old/new pair remains the same, however.

* gnu/packages/certs.scm (le-certs)[inputs]: Update hash for
isrgrootx1.pem, letsencryptauthorityx3.pem, and
letsencryptauthorityx4.pem.
2020-02-15 17:07:03 +01:00
Marius Bakke 8ff645f338
gnu: nss, nss-certs: Update to 3.50.
* gnu/packages/nss.scm (nss): Update to 3.50.
* gnu/packages/certs.scm (nss-certs): Likewise.
2020-02-14 18:34:02 +01:00
Marius Bakke f7e3e8c82e
gnu: nss, nss-certs: Update to 3.49.1.
* gnu/packages/certs.scm (nss-certs): Update to 3.49.1.
* gnu/packages/nss.scm (nss): Likewise.
2020-01-19 10:35:10 +01:00
Marius Bakke f0bce2e08f
gnu: nss, nss-certs: Update to 3.49.
* gnu/packages/certs.scm (nss-certs): Update to 3.49.
* gnu/packages/nss.scm (nss): Likewise.
2020-01-12 20:26:07 +01:00
Marius Bakke d45c75fc57
gnu: nss, nss-certs: Update to 3.46.1.
* gnu/packages/nss.scm (nss): Update to 3.46.1.
* gnu/packages/certs.scm (nss-certs): Likewise.
2019-10-08 21:23:04 +02:00
Marius Bakke 8ed97b6ea1
gnu: nss, nss-certs: Update to 3.45.
* gnu/packages/certs.scm (nss-certs): Update to 3.45.
* gnu/packages/nss.scm (nss): Likewise.
2019-08-04 13:49:57 +02:00
Marius Bakke c2dad3f983
gnu: nss, nss-certs: Update to 3.44.1.
* gnu/packages/certs.scm (nss-certs): Update to 3.44.1.
* gnu/packages/nss.scm (nss): Likewise.
2019-06-29 23:30:18 +02:00
Marius Bakke 136b7d81f0
gnu: nss, nss-certs: Update to 3.44.
* gnu/packages/nss.scm (nss): Update to 3.44.
* gnu/packages/certs.scm (nss-certs): Likewise.
2019-05-24 23:28:32 +02:00
宋文武 48f19e60c4
gnu: le-certs: Update hashes.
They added the 3 missing '^M' to all pem certs.

* gnu/packages/certs.scm (le-certs)[inputs]: Update the hashes of
isrgrootx1.pem, letsencryptauthorityx3.pem, letsencryptauthorityx4.pem.
2019-05-02 21:40:41 +08:00
Marius Bakke 6f99fb5be0
gnu: nss, nss-certs: Update to 3.43.
* gnu/packages/gnuzilla.scm (nss): Update to 3.43.
* gnu/packages/certs.scm (nss-certs): Ditto.
2019-03-21 23:29:21 +01:00
Marius Bakke 2d39566d7e
gnu: nss, nss-certs: Update to 3.42.1.
* gnu/packages/certs.scm (nss-certs): Update to 3.42.1.
* gnu/packages/gnuzilla.scm (nss): Likewise.
2019-02-10 21:04:24 +01:00
Marius Bakke 3ce60c2247
gnu: nss, nss-certs: Update to 3.41.
* gnu/packages/certs.scm (nss-certs): Update to 3.41.
* gnu/packages/gnuzilla.scm (nss): Likewise.
2018-12-12 20:49:15 +01:00
Marius Bakke 8c62baa095
gnu: nss, nss-certs: Update to 3.40.1.
* gnu/packages/certs.scm (nss-certs): Update to 3.40.1.
* gnu/packages/gnuzilla.scm (nss): Likewise.
[arguments]: Adjust DOMSUF variable to upstream changes.
2018-12-08 19:58:06 +01:00
Marius Bakke e59588482b
gnu: nss, nss-certs: Update to 3.39 [fixes CVE-2018-12384].
* gnu/packages/gnuzilla.scm (nss): Update to 3.39.
* gnu/packages/certs.scm (nss-certs): Likewise.
2018-09-01 13:26:13 +02:00
Marius Bakke 7c3bea7e62
gnu: nss, nss-certs: Update to 3.38 [fixes CVE-2018-0495].
* gnu/packages/certs.scm (nss-certs): Update to 3.38.
* gnu/packages/gnuzilla.scm (nss): Likewise.
2018-06-26 13:51:20 +02:00
Marius Bakke 7469b7cb3d
gnu: nss, nss-certs: Update to 3.37.3.
* gnu/packages/gnuzilla.scm (nss): Update to 3.37.
* gnu/packages/certs.scm (nss-certs): Likewise.
2018-06-19 15:45:40 +02:00
Mark H Weaver f0ae90cbbb
Merge branch 'master' into core-updates 2018-04-30 16:48:15 -04:00
Marius Bakke c5154b37ac
gnu: nss, nss-certs: Update to 3.36.1.
* gnu/packages/gnuzilla.scm (nss): Update to 3.36.1.
* gnu/packages/certs.scm (nss-certs): Likewise.
2018-04-15 14:45:43 +02:00
Mark H Weaver e3cfef22c4
gnu: Use invoke and return #t from all builders.
* gnu/packages/admin.scm, gnu/packages/android.scm, gnu/packages/audio.scm,
gnu/packages/avr.scm, gnu/packages/base.scm, gnu/packages/bioinformatics.scm,
gnu/packages/certs.scm, gnu/packages/check.scm, gnu/packages/code.scm,
gnu/packages/commencement.scm, gnu/packages/dictionaries.scm,
gnu/packages/docbook.scm, gnu/packages/emacs.scm, gnu/packages/embedded.scm,
gnu/packages/fonts.scm, gnu/packages/games.scm, gnu/packages/gnome.scm,
gnu/packages/gnu-doc.scm, gnu/packages/guile.scm, gnu/packages/hurd.scm,
gnu/packages/javascript.scm, gnu/packages/libreoffice.scm,
gnu/packages/linux.scm, gnu/packages/lisp.scm, gnu/packages/lxde.scm,
gnu/packages/mail.scm, gnu/packages/markup.scm, gnu/packages/mate.scm,
gnu/packages/pkg-config.scm, gnu/packages/qt.scm, gnu/packages/rust.scm,
gnu/packages/scheme.scm, gnu/packages/sdl.scm, gnu/packages/statistics.scm,
gnu/packages/syncthing.scm, gnu/packages/tex.scm, gnu/packages/web.scm,
gnu/packages/wine.scm, gnu/packages/xfce.scm: In the builders of packages
using 'trivial-build-system', use invoke where appropriate, raise exceptions
on errors, and otherwise return #t.
2018-03-27 21:35:41 -04:00
Mark H Weaver 4530e854f1
gnu: le-certs: Use invoke.
* gnu/packages/certs.scm (le-certs)[arguments]: Use invoke in the builder.
2018-03-23 04:43:20 -04:00
Mark H Weaver dbf5b1186e
gnu: nss-certs: Use invoke.
* gnu/packages/certs.scm (nss-certs)[arguments]: Use invoke to detect errors
while running 'certdata2pem.py'.
2018-03-23 04:43:14 -04:00
Marius Bakke 9fcec717d3
gnu: nss, nss-certs: Update to 3.36.
* gnu/packages/gnuzilla.scm (nss): Update to 3.36.
* gnu/packages/certs.scm (nss-certs): Likewise.
2018-03-12 17:38:55 +01:00
Marius Bakke 7f69459aca
Merge branch 'master' into staging 2018-02-20 17:36:56 +01:00
Tobias Geerinckx-Rice 3c747a080f
gnu: nss-certs: Update phase style.
* gnu/packages/certs.scm (nss-certs)[arguments]: Use MODIFY-PHASES
syntax, substitute INVOKE for SYSTEM*, and end phas with #t.
2018-02-20 03:27:56 +01:00
Tobias Geerinckx-Rice 33171a3610
gnu: nss-certs: Update to 3.35.
* gnu/packages/certs.scm (nss-certs): Update to 3.35.
2018-01-22 00:25:36 +01:00