gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
432,960 Commits 9 Branches 0 Tags
2e7853293da7eb49c8aaa10aa4ba2d8ffa64acac
Commit Graph
432960 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Weinelt 2e7853293d cacert: Distrust TrustCor root certificates 
Mozilla set "Distrust After" for the three TrustCor Root CAs¹, so new
certificates issued would not be trusted after 2022/11/30, while older
enduser certificates would continue working until they expire. This is a
fine-grained policy option available to consumers of the NSS library,
such as Firefox or Thunderbird.

For Linux systems we generally export the Mozilla trust store into our
own CA bundle that ultimately lacks that metadata, because there is no
standardized way to parse it in the first place.

That means that as long as Mozilla keeps the certificate in their CA
program, even with time-based "Distrust" configured, we would keep
trusting it fully². That is completely unreasonable and that is why we
reject these CAs here for all users of nixpkgs.

The TrustCor CAs were primarily used to sign certificates for dynamic
hosts for domains provided through no-ip.com, so we expect the fallout
from this to be minimal.

[1] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
[2] https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem
 2022-12-06 19:12:53 +01:00
Martin Weinelt 60f52f6c83 Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-06 01:27:11 +01:00
Martin Weinelt 7ea3d4395d Merge remote-tracking branch 'origin/master' into staging-next 2022-12-06 01:26:56 +01:00
SandroandGitHub d74e49d8d1 Merge pull request #202078 from 2xsaiko/outgoing/crystal-aarch64-darwin 2022-12-06 01:23:20 +01:00
github-actions[bot]andGitHub 0ac4c6779e Merge master into staging-next 2022-12-06 00:02:32 +00:00
Martin WeineltandGitHub b786c2bf9c Merge pull request #204709 from r-ryantm/auto-update/python310Packages.aioesphomeapi 
python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1
 2022-12-06 00:35:17 +01:00
figsodaandGitHub ff93685724 Merge pull request #199371 from figsoda/fetchCrate 
fetchCrate: rewrite in terms of fetchzip
 2022-12-05 18:15:33 -05:00
R. Ryantm 3b03e122ef python310Packages.aioesphomeapi: 13.0.0 -> 13.0.1 2022-12-05 22:31:39 +00:00
Anderson TorresandGitHub 2987aa0aab Merge pull request #204617 from r-ryantm/auto-update/freecad 
freecad: 0.20.1 -> 0.20.2
 2022-12-05 19:22:16 -03:00
Robert ScottandGitHub 602ee7a175 Merge pull request #204584 from tjni/rav1e 
rav1e: 0.5.1 -> 0.6.1
 2022-12-05 22:12:18 +00:00
figsodaandGitHub 32df8276ec Merge pull request #204592 from figsoda/use-nextest 
treewide: enable cargo parallel tests with nextest
 2022-12-05 16:37:32 -05:00
Martin WeineltandGitHub 121bab7fa7 Merge pull request #204524 from mweinelt/ansible-language-server 2022-12-05 22:33:20 +01:00
SandroandGitHub e8d94a5d9e Merge pull request #201054 from wkral/scryer-prolog-update 2022-12-05 22:26:06 +01:00
SandroandGitHub 25bdd85ab6 Merge pull request #198644 from Luflosi/update/python3Packages.sphinxext-opengraph 2022-12-05 22:20:57 +01:00
Fabian AffolterandGitHub 966244ff8f Merge pull request #204662 from fabaff/winacl-bump 
python310Packages.winacl: 0.1.5 -> 0.1.6
 2022-12-05 22:16:00 +01:00
Thiago Kenji OkadaandGitHub 387779ef69 Merge pull request #204630 from PedroHLC/zen-kernels-6.0.11 
zen-kernels: 6.0.10 -> 6.0.11
 2022-12-05 21:01:32 +00:00
SandroandGitHub 4484c12d81 Merge pull request #196449 from natto1784/crate-overrides 2022-12-05 22:00:51 +01:00
Luke Granger-BrownandGitHub cc6635027a Merge pull request #204681 from Frostman/unpoller-passthru.tests 
unpoller: add passthru.tests
 2022-12-05 12:44:09 -08:00
SandroandGitHub 49526acb78 Merge pull request #204676 from figsoda/patsh 2022-12-05 21:40:29 +01:00
SandroandGitHub 4cebef3cb0 Merge pull request #204547 from aacebedo/aacebedo/mailspring 2022-12-05 21:38:35 +01:00
Sergey Lukjanov 2a8977997a unpoller: add passthru.tests 2022-12-05 12:21:33 -08:00
Martin Weinelt 3a5e1d626c nodePackages."@ansible/ansible-language-server": drop 
in favor of `ansible-language-server` built using buildNpmPackage.
 2022-12-05 21:06:47 +01:00
Martin Weinelt 5d723f6ad4 ansible-language-server: init at 1.0.2-next.0 2022-12-05 21:06:47 +01:00
SandroandGitHub fc9f1e2b48 Merge pull request #201248 from panicgh/cups-kyodialog 2022-12-05 21:05:11 +01:00
figsodaandGitHub aaf173db6b Merge pull request #204670 from figsoda/neovide 
neovide: drop python2, clean up
 2022-12-05 15:04:03 -05:00
figsoda 0284480527 patsh: add comments explaining the patches 2022-12-05 15:02:01 -05:00
Bill HuangGitHubSandro
 		c8366d7f3e python310Packages.ale-py: init at 0.8.0 (#199118) 
Co-authored-by: Sandro <sandro.jaeckel@gmail.com>
 2022-12-05 21:00:45 +01:00
Vincent LaporteandVincent Laporte 929771b9ed ocaml-ng.ocamlPackages_5_0: 5.0.0-β1 → 5.0.0-β2 2022-12-05 20:46:40 +01:00
figsoda eeb1fad1bc neovide: drop python2, clean up 2022-12-05 14:29:57 -05:00
Luke Granger-BrownandGitHub a5f661b80e Merge pull request #204668 from Frostman/unpoller-2.3.1 
unpoller: 2.2.0 -> 2.3.1
 2022-12-05 11:15:27 -08:00
Sergey Lukjanov 87849c9009 unpoller: add Frostman to maintainers 2022-12-05 10:47:13 -08:00
Sergey Lukjanov 9577904100 unpoller: 2.2.0 -> 2.3.1 2022-12-05 10:46:34 -08:00
figsodaandGitHub fe701a6c08 Merge pull request #204657 from r-ryantm/auto-update/jackett 
jackett: 0.20.2318 -> 0.20.2325
 2022-12-05 13:39:18 -05:00
figsodaandGitHub 740d4bde61 Merge pull request #204661 from tjni/hexyl 
hexyl: 0.10.0 -> 0.11.0
 2022-12-05 13:36:22 -05:00
Fabian AffolterandGitHub 3754f95007 Merge pull request #200912 from fabaff/responses-bump 
python310Packages.responses: 0.21.0 -> 0.22.0
 2022-12-05 19:10:10 +01:00
Fabian AffolterandGitHub f2dc6ffea1 Merge pull request #202668 from fabaff/weconnect-bump 
python310Packages.oauthlib: 3.2.1 -> 3.2.2, python310Packages.weconnect: 0.48.3 -> 0.50.0, python310Packages.weconnect-mqtt: 0.40.3 -> 0.40.4
 2022-12-05 19:09:09 +01:00
Fabian AffolterandGitHub c96b7c6974 Merge pull request #193652 from fabaff/pyhamcrest-bump 
python310Packages.pyhamcrest: 2.0.3 -> 2.0.4
 2022-12-05 19:01:25 +01:00
Naïm FavierandGitHub a6dd75809d Merge pull request #204178 from ncfavier/iso-filter-nixpkgs 2022-12-05 19:00:03 +01:00
Fabian AffolterandGitHub 09a58eb091 Merge pull request #199903 from fabaff/websocket-client-bump 
python310Packages.websocket-client: 1.4.1 -> 1.4.2
 2022-12-05 18:58:39 +01:00
Fabian AffolterandGitHub c150f73fd4 Merge pull request #204600 from fabaff/sentry-sdk-bump 
python310Packages.sentry-sdk: 1.11.0 -> 1.11.1, python310Packages.twilio: 7.15.3 -> 7.15.4
 2022-12-05 18:57:25 +01:00
Bjørn Forsman 831fc4f86a nixos/tests/bazarr: remove unneeded timezone workaround 
The issue was fixed in bazarr-1.1.3.
 2022-12-05 18:51:53 +01:00
R. RyantmandBjørn Forsman 20e9c067c7 bazarr: 1.1.2 -> 1.1.3 2022-12-05 18:51:53 +01:00
Fabian Affolter a8b32d0184 python310Packages.winacl: 0.1.5 -> 0.1.6 
Changelog: https://github.com/skelsec/winacl/releases/tag/0.1.6
 2022-12-05 18:33:06 +01:00
Fabian Affolter 470cc589bc python310Packages.winacl: add changelog to meta 2022-12-05 18:32:23 +01:00
Theodore Ni 4acbee468c hexyl: 0.10.0 -> 0.11.0 2022-12-05 09:29:30 -08:00
Fabian AffolterandGitHub 6e904178e0 Merge pull request #204421 from r-ryantm/auto-update/metal-cli 
metal-cli: 0.11.0 -> 0.12.0
 2022-12-05 18:24:53 +01:00
Fabian AffolterandGitHub 21aba1cdd2 Merge pull request #204504 from r-ryantm/auto-update/python3.10-mapbox-earcut 
python310Packages.mapbox-earcut: 1.0.0 -> 1.0.1
 2022-12-05 18:23:18 +01:00
Fabian AffolterandGitHub 79a3c26b6f Merge pull request #204530 from skeuchel/cross-mbuffer 
mbuffer: fix cross compilation
 2022-12-05 18:21:12 +01:00
Felix BühlerandGitHub 445d20672c Merge pull request #204498 from Stunkymonkey/deploy-rs-2022-11-18 
deploy-rs: 2022-08-15 -> 2022-11-18
 2022-12-05 18:20:59 +01:00
figsodaandGitHub b977e15a38 Merge pull request #204588 from figsoda/sniffnet 
sniffnet: init at 1.0.1
 2022-12-05 12:20:46 -05:00