about summary refs log tree commit diff
path: root/pkgs/tools/security/gnupg
Commit message (Collapse)AuthorAge
* libusb-compat-0_1: rename from libusbJan Tojnar2020-04-28
|
* gnupg: use libusb1 (#85374)Linus Heckemann2020-04-21
| | | | | | | * gnupg: use libusb1 This fixes scdaemon's direct ccid support. * systemd: fix gnupg-minimal
* treewide: Per RFC45, remove all unquoted URLsMichael Reilly2020-04-10
|
* gnupg: 2.2.19 -> 2.2.20Lancelot SIX2020-03-21
| | | | | See https://lists.gnu.org/archive/html/info-gnu/2020-03/msg00008.html for release information.
* gnupg: apply patch to allow import of key updates without user idsVincent Breitmoser2020-03-06
| | | | | | | | | | | | | | | This adds a patch series which allows GnuPG to import updates (revocations and subkeys) from certificates that contain no user ids. This is relevant for refreshing keys from the default keyserver keys.openpgp.org, where only user ids that contain verified email addresses will be distributed, and revoked keys never contain any user ids. This patch series was originally authored and submitted to upstream half a year ago (by me), but now comes from Debian packaging where it's been included since then. Relates to the following upstream issue: https://dev.gnupg.org/T4393
* gnupg: 2.2.18 -> 2.2.19Lancelot SIX2019-12-10
| | | | | See https://lists.gnu.org/archive/html/info-gnu/2019-12/msg00001.html for release information.
* gnupg: 2.2.17 -> 2.2.18Lancelot SIX2019-11-26
| | | | | See https://lists.gnu.org/archive/html/info-gnu/2019-11/msg00010.html for release information
* gnugp: adding option for minimal buildwucke132019-11-02
| | | | Basically a flavour of gnugpg, which solely containts `bin/gnupg`.
* gnupg: disable gui/pinentry support by defaultFranz Pletz2019-10-16
| | | | | | | | | | | | This solves the dependency cycle in gcr alternatively so there won't be two gnupg store paths in a standard NixOS system which has udisks2 enabled by default. NixOS users are expected to use the gpg-agent user service to pull in the appropriate pinentry flavour or install it on their systemPackages and set it in their local gnupg agent config instead. Co-authored-by: Florian Klink <flokli@flokli.de>
* gnupg: fix cross-compilationNick Spinale2019-09-16
|
* treewide: name -> pname (easy cases) (#66585)volth2019-08-15
| | | | | | | | | treewide replacement of stdenv.mkDerivation rec { name = "*-${version}"; version = "*"; to pname
* gnupg: Allow GnuPG1 to build on all platforms.gcv2019-07-31
|
* gnupg: 2.2.16 -> 2.2.17Will Dietz2019-07-09
| | | | https://lists.gnupg.org/pipermail/gnupg-announce/2019q3/000439.html
* gnupg: vendor SKS patchAlyssa Ross2019-07-03
| | | | | | This quickly became a 404 upstream. Fixes https://github.com/NixOS/nixpkgs/64256.
* gnupg: apply default server CA verification patchAlyssa Ross2019-06-30
| | | | | | | | | | | | | | | | | | | | | | | See discussion at https://github.com/NixOS/nixpkgs/pull/63952#issuecomment-507048690. Upstream commit: commit 1c9cc97e9d47d73763810dcb4a36b6cdf31a2254 Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net> Date: Sun Jun 30 11:54:35 2019 -0400 dirmngr: Only use SKS pool CA for SKS pool * dirmngr/http.c (http_session_new): when checking whether the keyserver is the HKPS pool, check specifically against the pool name, as ./configure might have been used to select a different default keyserver. It makes no sense to apply Kristian's certificate authority to anything other than the literal host hkps.pool.sks-keyservers.net. Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net> GnuPG-Bug-Id: 4593
* gnupg: change default keyserver to non-SKSAlyssa Ross2019-06-30
| | | | | | | | | | | | | | | | See https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f. The SKS network is vulnerable to certificate poisoning, which can destroy GnuPG installations. keys.openpgp.org is a new non-SKS keyserver that is resistant to this type of attack. With such an attack being possible, it is unsafe to use SKS keyservers for almost anything, and so we should protect our users from a now unsafe default. keys.openpgp.org offers some (but not all) functionality of SKS, and is better than nothing. This default is only present in gnupg22. gnupg20 and gnupg1orig are not affected.
* gnupg: 2.2.15 -> 2.2.16Will Dietz2019-05-28
| | | | https://dev.gnupg.org/T4509
* Merge pull request #58381 from dtzWill/update/gnupg-2.2.15Peter Simons2019-03-26
|\ | | | | gnupg: 2.2.14 -> 2.2.15
| * gnupg: 2.2.14 -> 2.2.15Will Dietz2019-03-26
| | | | | | | | https://dev.gnupg.org/T4434
* | Merge pull request #57818 from illegalprime/fix/gnupg-crossPeter Simons2019-03-26
|\ \ | |/ |/| gnupg: use config flags to find lib prefix instead of their binary tools
| * gnupg: use config flags to find lib prefix instead of their binary toolsMichael Eden2019-03-16
| |
* | gnupg: 2.2.13 -> 2.2.14Will Dietz2019-03-19
|/ | | | https://lists.gnupg.org/pipermail/gnupg-announce/2019q1/000435.html
* gnupg: 2.2.12 -> 2.2.13Will Dietz2019-02-12
| | | | https://dev.gnupg.org/T4290
* treewide: remove wkennington as maintainerJörg Thalheim2019-01-26
| | | | | | He prefers to contribute to his own nixpkgs fork triton. Since he is still marked as maintainer in many packages this leaves the wrong impression he still maintains those.
* gnupg: 2.2.11 -> 2.2.12Will Dietz2018-12-19
| | | | https://dev.gnupg.org/T4289
* gnupg22: 2.2.10 -> 2.2.11Lancelot SIX2018-11-06
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2018-11/msg00003.html for release information
* gnupg1compat: reintroduce symlinks, only when actually neededCharles Duffy2018-10-06
|
* gnupg20: set version variable to fix gnupg1compatCharles Duffy2018-10-06
| | | | | | | | | | | | | | Presently, gnupg1compat only works with gnupg22. Without this change, the error ``` error: attribute 'version' missing, at .../nixpkgs/pkgs/tools/security/gnupg/1compat.nix:4:26 ``` is emitted when evaluating ``` pkgs.gnupg1compat.override { gnupg = pkgs.gnupg20; }' ```
* gnupg22: 2.2.9 -> 2.2.10 (#45809)Lancelot SIX2018-08-31
| | | | See https://lists.gnu.org/archive/html/info-gnu/2018-08/msg00010.html for release information
* gnupg: 2.2.8 -> 2.2.9 (#43431)Lancelot SIX2018-08-02
| | | | See https://lists.gnu.org/archive/html/info-gnu/2018-07/msg00003.html for release information.
* pkgs/*: remove unreferenced function argumentsvolth2018-07-21
|
* pcsclite: split packageJan Tojnar2018-06-29
|
* gnupg1orig: 1.4.22 -> 1.4.23R. RyanTM2018-06-14
| | | | | | | | | | | | | | | | | | | Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/gnupg/versions. These checks were done: - built on NixOS - /nix/store/bxq2w522d82qykwqi8wscm4v105zs2bq-gnupg-1.4.23/bin/gpgsplit passed the binary check. - /nix/store/bxq2w522d82qykwqi8wscm4v105zs2bq-gnupg-1.4.23/bin/gpg passed the binary check. - /nix/store/bxq2w522d82qykwqi8wscm4v105zs2bq-gnupg-1.4.23/bin/gpgv passed the binary check. - /nix/store/bxq2w522d82qykwqi8wscm4v105zs2bq-gnupg-1.4.23/bin/gpg-zip passed the binary check. - 4 of 4 passed binary check by having a zero exit code. - 1 of 4 passed binary check by having the new version present in output. - found 1.4.23 with grep in /nix/store/bxq2w522d82qykwqi8wscm4v105zs2bq-gnupg-1.4.23 - directory tree listing: https://gist.github.com/37dc2e87340f0983866c3c125172de27 - du listing: https://gist.github.com/4a84db46e37bd6d372fe020cc7826838
* gnupg: 2.2.7 -> 2.2.8Andreas Rammhold2018-06-10
| | | | | | | This addresses CVE-2018-12020. The details can be retrived from the changelog [1]. [1] https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html
* gnupg: 2.2.6 -> 2.2.7Lancelot SIX2018-05-03
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2018-05/msg00004.html for release informations.
* tree-wide: platforms = platforms.gnu; -> platforms = gnu ++ linuxWill Dietz2018-04-30
| | | | | | | | | | | | | | "platforms.gnu" has been linux-only since at least 17.03: $ nix eval -f channel:nixos-17.03 lib.platforms.gnu [ "i686-linux" "x86_64-linux" "armv5tel-linux" "armv6l-linux" "armv7l-linux" "aarch64-linux" "mips64el-linux" ] Unlike platforms.linux, platforms.gnu indicates "must use glibc" which for the most part is not intended. Replacing platforms.gnu with platforms.linux would be the same "today" but let's err on preserving existing behavior and be optimistic about platforms these packages work on.
* gnupg: 2.2.5 -> 2.2.6Lancelot SIX2018-04-16
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2018-04/msg00005.html for release information
* treewide: remove libintl hacksMatthew Bauer2018-03-22
|
* gnupg: 2.2.4 -> 2.2.5Lancelot SIX2018-03-05
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2018-02/msg00005.html for release information
* gnupg1orig: 1.4.21 -> 1.4.22Franz Pletz2018-01-28
|
* gnupg: 2.2.3 -> 2.2.4Lancelot SIX2017-12-21
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00013.html for release information
* gnupg: 2.2.2 -> 2.2.3Lancelot SIX2017-11-21
| | | | | | This is a maintenance release. See http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00008.html for release information
* gnupg: 2.2.1 -> 2.2.2Lancelot SIX2017-11-15
| | | | | | This is a maintenance release. See http://lists.gnu.org/archive/html/info-gnu/2017-11/msg00001.html for release information
* Merge remote-tracking branch 'upstream/staging' into deps-reorgJohn Ericson2017-09-28
|\
| * gnupg: 2.2.0 -> 2.2.1Lancelot SIX2017-09-20
| | | | | | | | | | See http://lists.gnu.org/archive/html/info-gnu/2017-09/msg00010.html for release information
* | treewide: Manual fix more pkg-config build-inputsJohn Ericson2017-09-21
|/
* gnupg: add gnupg2 alias/symlink for 2.2. Otherwise signing commits with git ↵Rob Vermaas2017-09-10
| | | | | | break. (cherry picked from commit c651a0ccbf5b17739390b56f91b656a7b920f643)
* gnupg: 2.1.23 -> 2.2.0Lancelot SIX2017-08-30
| | | | | See http://lists.gnu.org/archive/html/info-gnu/2017-08/msg00012.html for release information
* gnupg: 2.1.22 -> 2.1.23Lancelot SIX2017-08-11
| | | | | | | | | | | | | This release in a RC for gnupg-2.2. The main difference as far as nixpkgs is concerned is that the binary `gpg2` is now called `gpg` and `gpgv2` is called `gpgv`. This update fixed all explicit use of `gpg2` and `gpgv2` across nixpkgs, but there might be some packaged software that internally use `gpg2` not handeled by this commit. See http://lists.gnu.org/archive/html/info-gnu/2017-08/msg00001.html for full release information
* pkgs: refactor needless quoting of homepage meta attribute (#27809)Silvan Mosberger2017-08-01
| | | | | | | | | | | | * pkgs: refactor needless quoting of homepage meta attribute A lot of packages are needlessly quoting the homepage meta attribute (about 1400, 22%), this commit refactors all of those instances. * pkgs: Fixing some links that were wrongfully unquoted in the previous commit * Fixed some instances