From 1d919d32d7cc29657a4d69789b82f73da0483a68 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Wed, 12 Jul 2017 23:28:45 -0400 Subject: gnu: libressl: Update to 2.5.5. * gnu/packages/tls.scm (libressl): Update to 2.5.5. [source]: Use HTTPS URL. --- gnu/packages/tls.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index f80f7d3bcd..b211c9d96a 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -455,16 +455,16 @@ required structures.") (define-public libressl (package (name "libressl") - (version "2.5.4") + (version "2.5.5") (source (origin (method url-fetch) (uri (string-append - "http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-" + "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-" version ".tar.gz")) (sha256 (base32 - "1ykf6dqlbafafhbdfmcj19pjj1z6wmsq0rmyqga1i0xv5x95nyhh")))) + "1i77viqy1afvbr392npk9v54k9zhr9zq2vhv6pliza22b0ymwzz5")))) (build-system gnu-build-system) (arguments ;; Do as if 'getentropy' was missing since older Linux kernels lack it -- cgit 1.4.1 From df08f385705dad9f342e7d1f51407d6207d8b557 Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Thu, 27 Apr 2017 22:58:58 -0400 Subject: gnu: libressl: Provide a TLS-enabled implementation of netcat. * gnu/packages/tls.scm (libressl)[arguments]: Pass '--enable-nc' to #:configure-flags. --- gnu/packages/tls.scm | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index b211c9d96a..00e99439b0 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -470,7 +470,9 @@ required structures.") ;; Do as if 'getentropy' was missing since older Linux kernels lack it ;; and libc would return ENOSYS, which is not properly handled. ;; See . - '(#:configure-flags '("ac_cv_func_getentropy=no"))) + '(#:configure-flags '("ac_cv_func_getentropy=no" + ;; Provide a TLS-enabled netcat. + "--enable-nc"))) (native-search-paths ;; FIXME: These two variables must designate a single file or directory ;; and are not actually "search paths." In practice it works OK in @@ -484,9 +486,10 @@ required structures.") (files '("etc/ssl/certs/ca-certificates.crt"))))) (home-page "https://www.libressl.org/") (synopsis "SSL/TLS implementation") - (description "LibreSSL is a version of the TLS/crypto stack forked -from OpenSSL in 2014, with the goals of modernizing the codebase, improving -security, and applying best practice development processes.") + (description "LibreSSL is a version of the TLS/crypto stack, forked from +OpenSSL in 2014 with the goals of modernizing the codebase, improving security, +and applying best practice development processes. This package also includes a +netcat implementation that supports TLS.") ;; Files taken from OpenSSL keep their license, others are under various ;; non-copyleft licenses. (license (list license:openssl -- cgit 1.4.1 From a08a9b8c38d641e25eaa2fe340112da78376884a Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Fri, 7 Jul 2017 00:42:43 -0400 Subject: gnu: certbot, python-acme: Update to 0.16.0. * gnu/pckages/tls.scm (certbot, python-acme, python2-acme): Update to 0.16.0. --- gnu/packages/tls.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 00e99439b0..2b317a84f1 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -501,13 +501,13 @@ netcat implementation that supports TLS.") (package (name "python-acme") ;; Remember to update the hash of certbot when updating python-acme. - (version "0.15.0") + (version "0.16.0") (source (origin (method url-fetch) (uri (pypi-uri "acme" version)) (sha256 (base32 - "11zwgj663vr575pbqw74ia10wxaw16i8rnkcivsrbsx148rxdbcz")))) + "1kg9bnwywsr18hgvqyhxqqi90l2qa7449f41q3fdq2y59h9nk2sk")))) (build-system python-build-system) (arguments `(#:phases @@ -558,7 +558,7 @@ netcat implementation that supports TLS.") (uri (pypi-uri name version)) (sha256 (base32 - "1srvmjxz75dbafx7xfg1w3n9h3srr9p2ljnfsih9dwwd5cxh9i5q")))) + "11p1vsps5rbpha3k5jnmf9i6rcp6299h9b34wdh21cq6dgyh2n3r")))) (build-system python-build-system) (arguments `(,@(substitute-keyword-arguments (package-arguments python-acme) -- cgit 1.4.1 From 644e5f17dfd2f5b3bbf656580d6f1f84c52e668a Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Wed, 19 Jul 2017 01:42:08 +0200 Subject: download: Add OpenBSD mirrors. * guix/download.scm (%mirrors) : Add HTTPS OpenBSD mirrors. * gnu/packages/ntp.scm (openntpd)[source]: Use them. * gnu/packages/ssh.scm (openssh)[source]: Likewise. * gnu/packages/tls.scm (libressl)[source]: Likewise. --- gnu/packages/ntp.scm | 4 +--- gnu/packages/ssh.scm | 16 ++++++---------- gnu/packages/tls.scm | 16 +++++++--------- guix/download.scm | 51 ++++++++++++++++++++++++++++++++++++++++++++++++++- 4 files changed, 64 insertions(+), 23 deletions(-) (limited to 'gnu/packages/tls.scm') diff --git a/gnu/packages/ntp.scm b/gnu/packages/ntp.scm index 7befd491ac..959aa55a76 100644 --- a/gnu/packages/ntp.scm +++ b/gnu/packages/ntp.scm @@ -101,10 +101,8 @@ computers over a network.") (version "6.1p1") (source (origin (method url-fetch) - ;; XXX Use mirror://openbsd (uri (string-append - "http://ftp.openbsd.org/pub/OpenBSD/OpenNTPD/openntpd-" - version ".tar.gz")) + "mirror://openbsd/OpenNTPD/" name "-" version ".tar.gz")) (sha256 (base32 "1ykx9ga76k5m54h7k5x4ds2clxsyfniss5vmf88pxnrip5bx6if8")))) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index 3cde6af5fe..89df37a636 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -130,16 +130,12 @@ a server that supports the SSH-2 protocol.") (name "openssh") (version "7.5p1") (source (origin - (method url-fetch) - (uri (let ((tail (string-append name "-" version ".tar.gz"))) - (list (string-append "http://openbsd.cs.fau.de/pub/OpenBSD/OpenSSH/portable/" - tail) - (string-append "http://ftp.fr.openbsd.org/pub/OpenBSD/OpenSSH/portable/" - tail) - (string-append "http://ftp2.fr.openbsd.org/pub/OpenBSD/OpenSSH/portable/" - tail)))) - (sha256 (base32 - "1w7rb5gbrikxdkp8w7zxnci4549gk4bw1lml01s59w5rzb2y6ilq")))) + (method url-fetch) + (uri (string-append "mirror://openbsd/OpenSSH/portable/" + name "-" version ".tar.gz")) + (sha256 + (base32 + "1w7rb5gbrikxdkp8w7zxnci4549gk4bw1lml01s59w5rzb2y6ilq")))) (build-system gnu-build-system) (native-inputs `(("groff" ,groff))) (inputs `(("openssl" ,openssl) diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm index 2b317a84f1..0a81633aa7 100644 --- a/gnu/packages/tls.scm +++ b/gnu/packages/tls.scm @@ -456,15 +456,13 @@ required structures.") (package (name "libressl") (version "2.5.5") - (source - (origin - (method url-fetch) - (uri (string-append - "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-" - version ".tar.gz")) - (sha256 - (base32 - "1i77viqy1afvbr392npk9v54k9zhr9zq2vhv6pliza22b0ymwzz5")))) + (source (origin + (method url-fetch) + (uri (string-append "mirror://openbsd/LibreSSL/" + name "-" version ".tar.gz")) + (sha256 + (base32 + "1i77viqy1afvbr392npk9v54k9zhr9zq2vhv6pliza22b0ymwzz5")))) (build-system gnu-build-system) (arguments ;; Do as if 'getentropy' was missing since older Linux kernels lack it diff --git a/guix/download.scm b/guix/download.scm index c1da515477..d7590d4110 100644 --- a/guix/download.scm +++ b/guix/download.scm @@ -277,7 +277,56 @@ "http://kde.mirrors.tds.net/pub/kde/" ;; Oceania "http://ftp.kddlabs.co.jp/pub/X11/kde/" - "http://kde.mirror.uber.com.au/")))) + "http://kde.mirror.uber.com.au/") + (openbsd + "https://ftp.openbsd.org/pub/OpenBSD/" + ;; Anycast CDN redirecting to your friendly local mirror. + "https://mirrors.evowise.com/pub/OpenBSD/" + ;; Other HTTPS mirrors from https://www.openbsd.org/ftp.html + "https://mirror.aarnet.edu.au/pub/OpenBSD/" + "https://ftp2.eu.openbsd.org/pub/OpenBSD/" + "https://openbsd.c3sl.ufpr.br/pub/OpenBSD/" + "https://openbsd.ipacct.com/pub/OpenBSD/" + "https://ftp.OpenBSD.org/pub/OpenBSD/" + "https://openbsd.cs.toronto.edu/pub/OpenBSD/" + "https://openbsd.delfic.org/pub/OpenBSD/" + "https://openbsd.mirror.netelligent.ca/pub/OpenBSD/" + "https://mirrors.ucr.ac.cr/pub/OpenBSD/" + "https://mirrors.dotsrc.org/pub/OpenBSD/" + "https://mirror.one.com/pub/OpenBSD/" + "https://ftp.fr.openbsd.org/pub/OpenBSD/" + "https://ftp2.fr.openbsd.org/pub/OpenBSD/" + "https://mirrors.ircam.fr/pub/OpenBSD/" + "https://ftp.spline.de/pub/OpenBSD/" + "https://mirror.hs-esslingen.de/pub/OpenBSD/" + "https://ftp.halifax.rwth-aachen.de/openbsd/" + "https://ftp.hostserver.de/pub/OpenBSD/" + "https://ftp.fau.de/pub/OpenBSD/" + "https://ftp.cc.uoc.gr/pub/OpenBSD/" + "https://openbsd.hk/pub/OpenBSD/" + "https://ftp.heanet.ie/pub/OpenBSD/" + "https://openbsd.mirror.garr.it/pub/OpenBSD/" + "https://mirror.litnet.lt/pub/OpenBSD/" + "https://mirror.meerval.net/pub/OpenBSD/" + "https://ftp.nluug.nl/pub/OpenBSD/" + "https://ftp.bit.nl/pub/OpenBSD/" + "https://mirrors.dalenys.com/pub/OpenBSD/" + "https://ftp.icm.edu.pl/pub/OpenBSD/" + "https://ftp.rnl.tecnico.ulisboa.pt/pub/OpenBSD/" + "https://mirrors.pidginhost.com/pub/OpenBSD/" + "https://mirror.yandex.ru/pub/OpenBSD/" + "https://ftp.eu.openbsd.org/pub/OpenBSD/" + "https://ftp.yzu.edu.tw/pub/OpenBSD/" + "https://www.mirrorservice.org/pub/OpenBSD/" + "https://anorien.csc.warwick.ac.uk/pub/OpenBSD/" + "https://mirror.bytemark.co.uk/pub/OpenBSD/" + "https://mirrors.sonic.net/pub/OpenBSD/" + "https://ftp3.usa.openbsd.org/pub/OpenBSD/" + "https://mirrors.syringanetworks.net/pub/OpenBSD/" + "https://openbsd.mirror.constant.com/pub/OpenBSD/" + "https://ftp4.usa.openbsd.org/pub/OpenBSD/" + "https://ftp5.usa.openbsd.org/pub/OpenBSD/" + "https://mirror.esc7.net/pub/OpenBSD/")))) (define %mirror-file ;; Copy of the list of mirrors to a file. This allows us to keep a single -- cgit 1.4.1