summary refs log tree commit diff
path: root/pkgs/tools/networking
diff options
context:
space:
mode:
authorGraham Christensen <graham@grahamc.com>2018-02-09 19:44:12 -0500
committerGitHub <noreply@github.com>2018-02-09 19:44:12 -0500
commit573c52036c9b363336ebc7fc04af72605fc368ba (patch)
tree28cc0c1ae2787b019bb1f492446c8318ae8cda2c /pkgs/tools/networking
parent2941217227b56834dfb3f06e43d7ba1b054cedc6 (diff)
parent40bceae84ed8ee6c660ccec8bb826576b272ee6e (diff)
downloadnixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar.gz
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar.bz2
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar.lz
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar.xz
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.tar.zst
nixlib-573c52036c9b363336ebc7fc04af72605fc368ba.zip
Merge pull request #34793 from oxij/pkg/fetchurl-securely
trivial: fetchurl more securely
Diffstat (limited to 'pkgs/tools/networking')
-rw-r--r--pkgs/tools/networking/curl/default.nix2
-rw-r--r--pkgs/tools/networking/stunnel/default.nix6
2 files changed, 5 insertions, 3 deletions
diff --git a/pkgs/tools/networking/curl/default.nix b/pkgs/tools/networking/curl/default.nix
index 16b22e3f2554..dbe2a6639352 100644
--- a/pkgs/tools/networking/curl/default.nix
+++ b/pkgs/tools/networking/curl/default.nix
@@ -27,7 +27,7 @@ stdenv.mkDerivation rec {
   name = "curl-7.58.0";
 
   src = fetchurl {
-    url = "http://curl.haxx.se/download/${name}.tar.bz2";
+    url = "https://curl.haxx.se/download/${name}.tar.bz2";
     sha256 = "0cg7klhf1ksnbw5wvwa802qir877zv4y3dj7swz1xh07g3wq3c0w";
   };
 
diff --git a/pkgs/tools/networking/stunnel/default.nix b/pkgs/tools/networking/stunnel/default.nix
index deac37468360..0d328c02d371 100644
--- a/pkgs/tools/networking/stunnel/default.nix
+++ b/pkgs/tools/networking/stunnel/default.nix
@@ -5,8 +5,10 @@ stdenv.mkDerivation rec {
   version = "5.44";
 
   src = fetchurl {
-    url    = "http://www.stunnel.org/downloads/${name}.tar.gz";
-    sha256 = "1692y69wl7j6yjgnrrzclgzb34bxsaxjzl1dfy47vms7pdfk42lr";
+    url    = "https://www.stunnel.org/downloads/${name}.tar.gz";
+    sha256 = "990a325dbb47d77d88772dd02fbbd27d91b1fea3ece76c9ff4461eca93f12299";
+    # please use the contents of "https://www.stunnel.org/downloads/${name}.tar.gz.sha256",
+    # not the output of `nix-prefetch-url`
   };
 
   buildInputs = [ openssl ];