Commit Graph

2200 Commits

Author SHA1 Message Date
ajs124
e5212aaa67 cacert: 3.83 -> 3.86
https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/NqCkaX216zY/m/QAUPTaBWCgAJ
2022-12-09 00:22:17 +01:00
github-actions[bot]
ac72e30512 Merge master into haskell-updates 2022-12-08 00:12:59 +00:00
Linus Heckemann
36cec7c971 Merge pull request #204795 from mweinelt/cacert-distrust-trustcore
cacert: Distrust TrustCor root certificates
2022-12-07 11:37:47 +01:00
R. Ryantm
875d397433 v2ray-geoip: 202211240054 -> 202212010055 2022-12-07 15:53:17 +08:00
github-actions[bot]
0ad12b3774 Merge master into haskell-updates 2022-12-07 00:13:32 +00:00
Martin Weinelt
2e7853293d cacert: Distrust TrustCor root certificates
Mozilla set "Distrust After" for the three TrustCor Root CAs¹, so new
certificates issued would not be trusted after 2022/11/30, while older
enduser certificates would continue working until they expire. This is a
fine-grained policy option available to consumers of the NSS library,
such as Firefox or Thunderbird.

For Linux systems we generally export the Mozilla trust store into our
own CA bundle that ultimately lacks that metadata, because there is no
standardized way to parse it in the first place.

That means that as long as Mozilla keeps the certificate in their CA
program, even with time-based "Distrust" configured, we would keep
trusting it fully². That is completely unreasonable and that is why we
reject these CAs here for all users of nixpkgs.

The TrustCor CAs were primarily used to sign certificates for dynamic
hosts for domains provided through no-ip.com, so we expect the fallout
from this to be minimal.

[1] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ
[2] https://utcc.utoronto.ca/~cks/space/blog/linux/CARootStoreTrustProblem
2022-12-06 19:12:53 +01:00
Jan Tojnar
f2d78a4d52 Merge pull request #204383 from jtojnar/gnome-staging
GNOME staging updates
2022-12-06 16:25:14 +01:00
github-actions[bot]
d7af8ae032 Merge master into haskell-updates 2022-12-06 00:12:34 +00:00
Jan Tojnar
26c6895e10 mobile-broadband-provider-info: 20220725 → 20221107
20220725...20221107

Changelog-Reviewed-By: Jan Tojnar <jtojnar@gmail.com>
2022-12-05 19:00:19 +01:00
Martin Weinelt
9256404e6b Merge remote-tracking branch 'origin/staging-next' into staging 2022-12-05 13:22:34 +01:00
github-actions[bot]
d267d26578 Merge master into staging-next 2022-12-05 06:01:36 +00:00
R. Ryantm
47a9f2f8f8 spdx-license-list-data: 3.18 -> 3.19 2022-12-05 03:06:03 +00:00
Dennis Gosnell
6f7b7da617 all-cabal-hashes: 2022-12-01T21:24:50Z -> 2022-12-03T02:23:34Z
This commit has been generated by maintainers/scripts/haskell/update-hackage.sh
2022-12-02 23:36:55 -05:00
github-actions[bot]
0915b926cd Merge master into haskell-updates 2022-12-02 00:13:35 +00:00
Dennis Gosnell
5e2fc0cbe5 all-cabal-hashes: 2022-11-26T14:57:41Z -> 2022-12-01T21:24:50Z
This commit has been generated by maintainers/scripts/haskell/update-hackage.sh
2022-12-02 08:05:08 +09:00
github-actions[bot]
d7555c9ff2 Merge staging-next into staging 2022-12-01 06:01:59 +00:00
github-actions[bot]
7ea4004879 Merge master into staging-next 2022-12-01 06:01:22 +00:00
Nick Cao
0ad82d4d52 v2ray-domain-list-community: 20220921050909 -> 20221130032508 2022-12-01 11:26:18 +08:00
Mario Rodas
bc87ee3722 Merge pull request #203679 from helsinki-systems/upd/tzdata
tzdata: 2022f -> 2022g
2022-11-30 06:27:58 -05:00
ajs124
9472190421 tzdata: 2022f -> 2022g
https://mm.icann.org/pipermail/tz-announce/2022-November/000076.html
2022-11-29 23:23:29 +01:00
github-actions[bot]
4580143b9e Merge master into haskell-updates 2022-11-28 00:13:34 +00:00
github-actions[bot]
38af11b9ce Merge staging-next into staging 2022-11-27 18:01:39 +00:00
R. Ryantm
9bd0e65477 v2ray-geoip: 202211170054 -> 202211240054 2022-11-27 21:02:10 +08:00
github-actions[bot]
6a307a25ce Merge master into haskell-updates 2022-11-27 00:15:21 +00:00
github-actions[bot]
6d0026d4d6 Merge staging-next into staging 2022-11-26 18:01:45 +00:00
sternenseemann
dc2d31d6ae all-cabal-hashes: 2022-11-20T07:33:12Z -> 2022-11-26T14:57:41Z
This commit has been generated by maintainers/scripts/haskell/update-hackage.sh
and maintainers/scripts/haskell/regenerate-hackage-packages.nix
2022-11-26 17:09:19 +01:00
Robert Schütz
34465f99ee libkkc-data: build using python3 2022-11-25 13:16:44 -08:00
github-actions[bot]
b9993d09a1 Merge master into haskell-updates 2022-11-22 00:15:18 +00:00
github-actions[bot]
66da6215fb Merge staging-next into staging 2022-11-22 00:03:02 +00:00
Sandro
3a05360e53 Merge pull request #200082 from panicgh/fetchgit-sparse-checkout 2022-11-21 20:00:56 +01:00
github-actions[bot]
0333e6cfab Merge master into haskell-updates 2022-11-21 00:15:04 +00:00
github-actions[bot]
cdba88b83b Merge staging-next into staging 2022-11-20 12:01:44 +00:00
R. Ryantm
991053d8a0 v2ray-geoip: 202211100058 -> 202211170054 2022-11-20 19:15:23 +08:00
Dennis Gosnell
4af90f1f5f all-cabal-hashes: 2022-11-11T17:48:48Z -> 2022-11-20T07:33:12Z
This commit has been generated by maintainers/scripts/haskell/update-hackage.sh
2022-11-20 03:31:53 -05:00
Nicolas Benes
c95d7d5a8c treewide: make sparseCheckout a list of strings 2022-11-15 19:46:12 +01:00
github-actions[bot]
c8011a8a29 Merge master into haskell-updates 2022-11-15 00:15:11 +00:00
github-actions[bot]
e572426521 Merge staging-next into staging 2022-11-14 18:01:45 +00:00
R. Ryantm
e5da3f3aef v2ray-geoip: 202211030059 -> 202211100058 2022-11-14 20:18:32 +08:00
Jörg Thalheim
4ebd36707e iana-etc: 20220915 -> 20221107 2022-11-14 10:07:25 +01:00
github-actions[bot]
988dfa8310 Merge master into haskell-updates 2022-11-13 00:14:47 +00:00
Sandro
1090462258 Merge pull request #196790 from DeeUnderscore/update/cldr-annotations-42.0 2022-11-13 00:51:26 +01:00
sternenseemann
09eb71ff7c all-cabal-hashes: 2022-11-03T21:09:38Z -> 2022-11-11T17:48:48Z
This commit has been generated by maintainers/scripts/haskell/update-hackage.sh
2022-11-11 18:52:56 +01:00
sternenseemann
5c044644a6 Merge remote-tracking branch 'origin/master' into haskell-updates 2022-11-10 13:56:56 +01:00
github-actions[bot]
551f47aa1f Merge master into haskell-updates 2022-11-06 00:17:02 +00:00
Vladimír Čunát
d07db27df6 Merge #198813: tzdata: fix build on darwin
...into staging
2022-11-05 17:01:41 +01:00
github-actions[bot]
3674d6a755 Merge staging-next into staging 2022-11-05 12:02:05 +00:00
markuskowa
19951ca9bd Merge pull request #199244 from markuskowa/fix-licenses
Fix licenses in various packages
2022-11-05 12:42:48 +01:00
github-actions[bot]
52c99d862c Merge staging-next into staging 2022-11-05 06:02:05 +00:00
R. Ryantm
f9dc913011 v2ray-geoip: 202210270100 -> 202211030059 2022-11-05 13:07:29 +08:00
Theodore Ni
dd3624849e tzdata: fix build on darwin
Version 2022f doesn't build on Darwin because its detection of whether
getrandom is available doesn't work. This has been fixed upstream, and
we can pull in the patches.
2022-11-03 17:49:00 -07:00