summaryrefslogtreecommitdiff
path: root/gnu/packages/tls.scm
AgeCommit message (Collapse)Author
8 daysgnu: guile-gnutls: Update to 5.0.1.Dariqq
* gnu/packages/tls.scm (guile-gnutls): Update to 5.0.1. [home-page]: Change to new repository url. [source]: Change download url to gnu mirrors. [#:make-flags] Remove XFAIL_TESTS Change-Id: Ie4253ecdd1de6497e09f5262c14a396b03d076f9 Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
2025-07-18gnu: perl-net-ssleay: Update to 1.94.Greg Hogan
* gnu/packages/patches/perl-net-ssleay-colon-parsing.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/base.scm (perl-net-ssleay): Update to 1.94. [source](origin): Add patch. Change-Id: Ie4b8bc713618fb72e86c07860fab30e47b96dc76 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2025-07-18gnu: libtasn1: Update to 4.20.0.Zheng Junjie
* gnu/packages/tls.scm (libtasn1): Update to 4.20.0. Change-Id: Icc1a1950d0e0d9ac769529dd91970eff6122d2eb
2025-07-18gnu: mbedtls-lts: Update to 2.28.9 and fix build with gcc-14.Janneke Nieuwenhuizen
* gnu/packages/tls.scm (mbedtls-lts): Update to 2.28.9. [arguments]: Extend #:configure-flags to relax gcc-14's strictness. Change-Id: I928b2c9b76966f830ff8c953d8978518f9e2993b
2025-07-06gnu: hiawatha: Update to 11.2.Andreas Enge
* gnu/packages/web.scm (hiawatha): Update to 11.2. [source]: Remove snippet. * gnu/packages/tls.scm (mbedtls-for-hiawatha): Inherit from mbedtls@3 instead of mbedtls-lts@2. Co-authored-by: Gabriel Wicky <gabriel@erlikon.ch> Change-Id: Id1b67ffb91f60df2fad2020a1b752452b364eede
2025-06-02gnu: libressl: Update to 4.1.0.Ashish SHUKLA
* gnu/packages/tls.scm (libressl): Update to 4.1.0. Change-Id: Ib16271ecf43c3a3f375a4e037ab05539c588345e Signed-off-by: Hilton Chain <hako@ultrarare.space>
2025-04-15gnu: aws-lc: Downgrade to 1.48.5.Greg Hogan
* gnu/packages/tls.scm (aws-lc): Downgrade to 1.48.5. Change-Id: I9cab7dad39759de7f7aed983fcef1dd5d19e45f3
2025-04-14gnu: libressl: Add debug output.Maxim Cournoyer
* gnu/packages/tls.scm (libressl) [outputs]: New field. Change-Id: Ie4949d46d3b9f403b4c87e4f3ae876c40c3032a6
2025-04-14gnu: libressl: Use gexp and drop obsolete workaround.Maxim Cournoyer
All of our kernels are now on the 5.x series, and other systems using 3.x kernels are EOL. * gnu/packages/tls.scm (libressl) [#:configure-flags]: Use gexps, and remove the 'ac_cv_func_getentropy=no' flag. Change-Id: If82e89d471adf3f6ea5983fa042f03dc5350c0d8
2025-04-06gnu: s2n: Update to 1.5.15.Ashish SHUKLA
* gnu/packages/tls.scm (s2n): Update to 1.5.15. Change-Id: I9d3285c2b58ee789b15a875f9cca3649a4451c67 Signed-off-by: Christopher Baines <mail@cbaines.net>
2025-04-06gnu: aws-lc: Update to 1.49.1Ashish SHUKLA
* gnu/packages/tls.scm (aws-lc): Update to 1.49.1. [native-inputs]: Add perl. Signed-off-by: Christopher Baines <mail@cbaines.net>
2025-02-11gnu: guile-gnutls: Add the debug output.Christopher Baines
So that debug symbols are available for debugging segfaults involving guile-gnutls. * gnu/packages/tls.scm (guile-gnutls)[outputs]: Add debug. Change-Id: Id447147b37ec0af76d0fcd568850d8f45fffa88d
2025-01-25gnu: openssl: Support loongarch64.Zheng Junjie
* gnu/packages/tls.scm (target->openssl-target, target->openssl-target): Add loongarch64 case. Change-Id: Ie85b4e1f39650f6134c9b5c4c81e0d5f83068558
2025-01-07gnu: wolfssl: Use G-expressions.Zheng Junjie
gnu/packages/tls.scm (wolfssl): Use G-expressions. Change-Id: I56d995360b50a614a405c4377f0c7714c2522508
2025-01-07gnu: wolfssl: Update to 5.7.6.Ashish SHUKLA
* gnu/packages/tls.scm (wolfssl): Update to 5.7.6. Change-Id: Ibe9274f032bc4e5757534e01b7d8d1603f69efdc Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
2024-12-26gnu: libressl: Update to 4.0.0.Ashish SHUKLA
Test certificate is updated upstream, so no need for a hack anymore. * gnu/packages/tls.scm (libressl): Update to 4.0.0. [native-inputs]: Remove. [arguments]<phases>: Remove. Change-Id: Ib22aae8e48af4b4f9b5039283e563b419e629cf0 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-12-03gnu: openssl-3.0: Support the 64bit Hurd.Janneke Nieuwenhuizen
* gnu/packages/patches/openssl-hurd64.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/tls.scm (openssl-3.0)[arguments]: When building for the 64bit Hurd, use it in new "apply-hurd-patch" phase. In #:configure-flags use "hurd-x86_64" for the 64bit Hurd. Change-Id: I8936377da726681b748cc010e1fbae3fb19dee05
2024-12-01gnu: gnutls: Change release monitoring URL.Ludovic Courtès
* gnu/packages/tls.scm (gnutls)[properties]: Change release monitoring URL. Add ‘upstream-name’. Change-Id: If6ee941246b130914ddf7ca11c074a9547b9d739
2024-11-28gnu: wolfssl: Update to 5.7.4.Ashish SHUKLA
* gnu/packages/tls.scm (wolfssl): Update to 5.7.4. Change-Id: I1438599e3febd71e50ae690f168b7bf12896223a Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
2024-11-03gnu: s2n: Support all 64-bit systems.Efraim Flashner
* gnu/packages/tls.scm (s2n)[supported-systems]: Expand to all 64-bit systems supported in Guix. Change-Id: Ide97bf8e5ec5090c4fb740c90cf0ec2aee4a3771
2024-10-11gnu: wolfssl: Update to 5.7.2. [security fixes]Nicolas Graves
This fixes CVE-2022-42905, CVE-2023-3724, CVE-2024-1543, CVE-2024-5991. * gnu/packages/tls.scm (wolfssl): Update to 5.7.2. Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-09-28gnu: s2n: Update to 1.5.1.Greg Hogan
* gnu/packages/tls.scm (s2n): Update to 1.5.1. [arguments]: Re-enable warnings as errors. [supported-systems]: Restrict to 64-bit systems. Change-Id: I09d690c96789961473c846eb8174ddc8a2b1ad4e
2024-09-28gnu: aws-lc: Update to 1.34.2.Greg Hogan
* gnu/packages/tls.scm (aws-lc): Update to 1.34.2. [native-inputs]: Remove libfaketime. [arguments]<#:configure-flags>: Disable Go. <#:phases>: Remove overwritten 'check phase. Change-Id: Ib15fc22d0660ad805395acbec6fc45a63079b6f4
2024-08-31gnu: openssl@1.1: Ungraft.Ludovic Courtès
* gnu/packages/tls.scm (openssl-1.1): Update to 1.1.1u. [replacement]: Remove. (openssl/fixed): Remove. Change-Id: Idd77b57276ea132eee8c2c3fe801150c7789ac59
2024-08-31gnu: guile-gnutls: Update to 4.0.0.Ludovic Courtès
* gnu/packages/tls.scm (guile-gnutls): Update to 4.0.0. [source]: Remove “gnutls-cross.patch”. [arguments]: Add #:make-flags. * gnu/packages/patches/gnutls-cross.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it. Change-Id: Ic4432e2d5ca37af5aa20cdf7e4e456afe2b37537
2024-08-31gnu: gnutls: Ungraft.Ludovic Courtès
* gnu/packages/tls.scm (gnutls): Update to 3.8.3. [replacement]: Remove. [home-page]: Adjust. (gnutls/fixed): Remove. Change-Id: I592161764ca152140c777625ea6165ca0e31af03
2024-07-15gnu: tls: Raise conditions from target->openssl-target.Christopher Baines
Rather than rasising generic errors. * gnu/packages/tls.scm (target->openssl-target): Raise conditions rather than generic errors. (openssl-1.1): Call target->openssl-target with the package. Change-Id: I13c63328cdf6bc177b20879805246ad94ff2665b
2024-06-11gnu: libressl: Run tests under ‘datefudge’.Ludovic Courtès
Fixes <https://issues.guix.gnu.org/71491>. * gnu/packages/tls.scm (libressl)[arguments]: Add #:phases. Change-Id: I85d866808a01265c90de6c662f35a083773faf08
2024-04-30gnu: guile-gnutls: Update to 4.0.0.Christopher Baines
* gnu/packages/tls.scm (guile-gnutls): Update to 4.0.0. Change-Id: I7ced2e1309364c990907fafc489917fcd56fa103
2024-02-05gnu: Add mbedtls, version 3.5.2.Hilton Chain
* gnu/packages/tls.scm (mbedtls): New variable. Change-Id: I09c86ce04734bd5b44441d7749688a5c39389ece
2024-02-05gnu: mbedtls-apache: Rename to mbedtls-lts.Hilton Chain
* gnu/packages/tls.scm (mbedtls-apache): Rename package to "mbedtls". Rename variable to… (mbedtls-lts): …this. (mbedtls-apache): Define as deprecated by mbedtls-lts. (mbedtls-for-hiawatha): Adjust accordingly. * doc/guix.texi: Likewise. * gnu/packages/emulators.scm (dolphin-emu,retroarch)[inputs]: Likewise. * gnu/packages/game-development.scm (godot-lts,godot)[inputs]: Likewise. * gnu/packages/hardware.scm (hueplusplus,openrgb)[inputs]: Likewise. * gnu/packages/haxe.scm (neko,haxe,hashlink)[inputs]: Likewise. * gnu/packages/irc.scm (inspircd)[inputs]: Likewise. * gnu/packages/julia-jll.scm (julia-mbedtls-jll)[arguments]<#:phases>,[inputs]: Likewise. * gnu/packages/julia.scm (julia)[arguments]<#:phases>,[inputs]: Likewise. * gnu/packages/linphone.scm (bctoolbox)[inputs]: Likewise. * gnu/packages/linux.scm (dislocker)[inputs]: Likewise. * gnu/packages/networking.scm (nng)[inputs]: Likewise. * gnu/packages/search.scm (dataparksearch)[inputs]: Likewise. * gnu/packages/video.scm (obs)[inputs]: Likewise. * gnu/packages/web.scm (hiawatha)[arguments]<#:phases>: Likewise. Change-Id: I0c58b3cd0bcf6e44e7b16a69f6d2739aa3c1545b
2024-02-05gnu: mbedtls-apache: Use gexps.Hilton Chain
* gnu/packages/tls.scm (mbedtls-apache)[arguments]: Use gexps. Change-Id: Idefca03b8eea0d3f18497afccc4a3a081caac87e
2024-02-05gnu: mbedtls-apache: Update to 2.28.7.Hilton Chain
* gnu/packages/tls.scm (mbedtls-apache): Update to 2.28.7. [license]: Add gpl2+. Change-Id: I946aa1436214a11ab3faa08b3ddf9c937a0462a9
2024-02-05gnu: mbedtls-for-hiawatha: Update package style.Hilton Chain
* gnu/packages/tls.scm (mbedtls-for-hiawatha)[arguments]: Use gexps. Remove trailing #t. Change-Id: I0af54b6fb7319bc811ce38c001b47686fb45b1bd
2024-02-05gnu: mbedtls-for-hiawatha: Use inherited source.Hilton Chain
* gnu/packages/tls.scm (mbedtls-for-hiawatha): Use inherited source. [arguments]<#:phases>: Keep "-Wformat-signedness". Change-Id: I562ae6533b518a853b9b59f8fb69c0135364277f
2024-01-20gnu: gnutls: Update to 3.8.3 [security-fixes].Jack Hill
Fixes CVE-2024-0553 and CVE-2024-0567. gnu/packages/tls.scm (gnutls-3.8.2): Rename to ... (gnutls/fixed): ... this. Update to 3.8.3. (gnutls): Rename replacement to gnutls/fixed. Change-Id: Ic44b3b0481ffd51cdc42a2d71a598f001b43c6f7 Signed-off-by: John Kehayias <john.kehayias@protonmail.com> Co-authored-by: John Kehayias <john.kehayias@protonmail.com>
2024-01-11gnu: Update guile-gnutls to 3.7.14.David Thompson
* gnu/packages/tls.scm (guile-gnutls): Update to 3.7.14. Change-Id: I851cb3554f1dcf5c286c345634ea71c5a7bbd973
2024-01-05gnutls: Update to 3.8.2 (fixes CVE-2023-5981).Maxim Cournoyer
* gnu/packages/tls.scm (gnutls): Graft with gnutls-3.8.2. (gnutls-3.8.1): Replace with... (gnutls-3.8.2): ... this. Remove obsolete set-path-max phase, and make the variable private. Change-Id: Ib5cd276c9ecc87d1adc2f4f9633d49676cfe856d
2024-01-04gnu: openssl: Fix building on x86_64-linux-gnux32.Efraim Flashner
* gnu/packages/tls.scm (target->openssl-target): Add entry for x86_64-linux-gnux32. Change-Id: Icbbdb76134da0811b8493c55ca2d3acdb77c5883 Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2023-12-12Revert "gnu: openssl: Don't error when targeting avr."Efraim Flashner
This reverts commit baeff7f546d700ae4f0c873bd0fce0ca84bebd21.
2023-12-12gnu: openssl: Don't error when targeting avr.Efraim Flashner
* gnu/packages/tls.scm (target->openssl-target): Add case for avr. Change-Id: I1cfc8b50fa4b2b864f8f8aa8898cc405ffc02580
2023-11-07gnu: mbedtls-apache: Update to 2.28.5.John Kehayias
This fixes mbedtls-apache failing some tests for unknown reasons after recent updates and ungrafting to other packages. This should soon be renamed to mbedtls-apache-lts and a newer version added; see <https://issues.guix.gnu.org/66718>. * gnu/packages/tls.scm (mbedtls-apache): Update to 2.28.5. Change-Id: Ie513c11cb60262be9865ebbd1f6238d39f299c42
2023-10-24gnu: gnutls@3.8: Do not rely expect ‘PATH_MAX’ definition on GNU/Hurd.Ludovic Courtès
Fixes <https://issues.guix.gnu.org/66691>. * gnu/packages/tls.scm (gnutls-3.8.1)[arguments]: New field. Change-Id: If208591d78d5d023220bd3a7e3841af172c605ff
2023-10-20gnu: gnutls: Replace with 3.8.1.Christopher Baines
The recommended way to address GNUTLS-SA-2020-07-14 / CVE-2023-0361 is to upgrade to 3.8.0 or later. * gnu/packages/tls.scm (gnutls-3.8.1): New variable. (gnutls)[replacement]: Use it. Signed-off-by: Christopher Baines <mail@cbaines.net>
2023-09-28gnu: openssl@1.1: Upgrade replacement to 1.1.1u.Ludovic Courtès
Includes fixes for CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-2650, CVE-2022-4304, CVE-2022-4450. * gnu/packages/tls.scm (openssl/fixed): Update to 1.1.1u. Co-authored-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
2023-09-28gnu: openssl@1.1: Really replace with fixed version.Ludovic Courtès
The ‘replacement’ field of ‘openssl-1.1’ was apparently lost in a previous merge commit ca. Jan. 2023; consequently, ‘openssl/fixed’ was unused. * gnu/packages/tls.scm (openssl-1.1)[replacement]: New field.
2023-08-13gnu: libressl: Update to 3.7.3 [fixes CVE-2023-35784].Tobias Geerinckx-Rice
Thanks to Dennis 'GNUtoo' Carikli for <https://issues.guix.gnu.org/64982>, but upgrading to 3.8.0 breaks (at least) OpenSMTPd. * gnu/packages/tls.scm (libressl): Update to 3.7.3.
2023-07-20gnu: openssl-1.1: Fix shared build for the Hurd.Janneke Nieuwenhuizen
* gnu/packages/tls.scm (openssl-1.1)[arguments]: When building for the Hurd, add phase 'patch-configure'. (openssl)[arguments]: And delete it again.
2023-07-20gnu: openssl: Build fix for the Hurd.Janneke Nieuwenhuizen
* gnu/packages/tls.scm (openssl-3.0)[arguments]: When building on the Hurd, add "hurd-x86" to #:configure-flags.
2023-06-25gnu: aws-lc: Fix tests.Greg Hogan
* gnu/packages/tls.scm (aws-lc)[native-inputs]: Add libfaketime. [arguments]<#:phases>: Replace and wrap 'check with faketime due to certificate expiration. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
generated by cgit v1.2.3 (git 2.50.1) at 2025-08-03 23:43:34 +0000