| Commit message (Collapse) | Author | Age |
| |
|
| |
|
|\
| |
| | |
cacert: simplify setupHook
|
| |
| |
| |
| |
| |
| | |
Triggering this setupHook for dependencies at targetOffset does not work
in cross-compilation cases where such a dependency is lacking. This
simplified setupHook is more robust.
|
|/ |
|
|
|
|
|
|
| |
Some SSL libs don't react to $SSL_CERT_FILE.
That actually makes sense to me, as we add this behavior
as nixpkgs-specific, so it seems "safer" to use $NIX_*.
|
|
|
|
|
|
| |
He prefers to contribute to his own nixpkgs fork triton.
Since he is still marked as maintainer in many packages
this leaves the wrong impression he still maintains those.
|
| |
|
|
|
|
|
|
|
|
|
| |
Related to #39927
```
$ nix-prefetch-url https://salsa.debian.org/debian/ca-certificates/raw/debian/20170717/mozilla/certdata2pem.py
path is '/nix/store/0d00axdac4h8ffxrf90s5zh8xdw3r29z-certdata2pem.py'
1d4q27j1gss0186a5m8bs5dk786w07ccyq0qi6xmd2zr1a8q16wy
```
|
|\
| |
| | |
update tor browsers
|
| | |
|
|/
|
|
|
| |
which contains all certs, each in a separate file.
This output is not installed by default.
|
| |
|
|
|
|
| |
Fixes #32981
|
|\
| |
| | |
Update homepage attributes: http -> https
|
| |
| |
| |
| |
| | |
Homepage link "http://.../" is a permanent redirect to "https://.../" and should be updated
https://repology.org/repository/nix_stable/problems
|
|/
|
|
| |
See #27576.
|
|
|
|
| |
Fixes #27576.
|
|
|
|
|
|
|
|
|
|
| |
Previously, the list of CA certificates was generated with a perl script
which is included in curl. As this script is not very flexible, this commit
refactors the expression to use the python script that Debian uses to
generate their CA certificates from Mozilla's trust store in NSS.
Additionally, an option was added to the cacerts derivation and the
`security.pki` module to blacklist specific CAs.
|
|
|
|
|
|
| |
The `mk-ca-bundle.pl` script manages quite well using only curl but
fails without LWP being present due to a `use` statement. This removes
the Perl import of the LWP library and adds curl as a build input.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
This is generated with a more recent version of mk-ca-bundle.pl. The
previous version mistakenly dropped some certificates, like "Verisign
Class 3 Public Primary Certification Authority".
|
| |
|
| |
|
|
|
|
|
| |
It's currently the same machine, but tarballs.nixos.org should become
an S3/CloudFront site eventually.
|
| |
|
| |
|
|
|
|
|
|
| |
function, so obsolete it.
svn path=/nixpkgs/branches/stdenv-updates/; revision=31644
|
|
|
|
| |
svn path=/nixpkgs/trunk/; revision=29269
|
|
|
|
| |
svn path=/nixpkgs/trunk/; revision=28856
|
|
svn path=/nixpkgs/trunk/; revision=19571
|