This package has been broken since 2014-01-20, according to Hydra [1]. I tried
various ad-hoc patching & adding missing dependencies, uncovering yet more
errors. Updating is also out of the question, as nixpkgs already contains the
latest version.
[1]: https://hydra.nixos.org/build/25188337
This reverts commit a8eb2a6a81. OpenSSH
7.0 is causing too many interoperability problems so soon before the
15.08 release.
For instance, it causes NixOps EC2 initial deployments to fail with
"REMOTE HOST IDENTIFICATION HAS CHANGED". This is because the client
knows the server's ssh-dss host key, but this key is no longer
accepted by default. Setting "HostKeyAlgorithms" to "+ssh-dss" does
not work because it causes ssh-dss to be ordered after
"ecdsa-sha2-nistp521", which the server also offers. (Normally, ssh
prioritizes host key algorithms for which the client has a known host
key, but not if you set HostKeyAlgorithms.)
Using sourceforge gives release binaries which don't require us to
regenerate all of the autotools scripts. This removes the need for
dependencies like cppunit and libgcrypt and autoreconfHook.
cc @geerds
This reverts commit cd52c04456 and
others.
Managing certificates (including revoking certificates and adding
custom certificates) becomes extremely painful if every package in the
system potentially depends on a different copy of cacert. Also, it
makes updating cacert rather expensive.
Close#8696.
Fixes issues found when jwhois attempts to launch terminal browser
(lynx) for HTTP whois queries, for example:
$ whois blah.io
[Querying http://www.io.io/cgi-bin/whois]
[HTTP: Unable to run web browser: /usr/bin/lynx: No such file or directory]
Tested via:
grep lynx \
/nix/store/bymgmn2vvw1n7nbb1isy87xg94s8f2ml-jwhois-4.0/etc/jwhois.conf \
| cut -f2 -d'"' \
| xargs stat -t
Following http://dev.maxmind.com/geoip/legacy/install/city/:
"Then rename the *.dat file to GeoIP.dat, GeoIPRegion.dat, or
GeoIPCity.dat, for the GeoIP Country, Region or City databases,
respectively."
Using the default "GeoLiteCity*.dat" name caused ipv6calc to miss it
(verified using `ipv6calc -vv`).
