nixpkgs/pkgs/build-support
Thomas Gerbet a169553f7e fetchurl: enable TLS verification when credentials are used
This make sure the credentials cannot be leaked in a MITM attack.
Note that this change might break some existing deployments if the users
tries to fetch resources on endpoints with invalid certificates.
The impacted users will have the following choices:
* fix the endpoint providing the resource
* override SSL_CERT_FILE to either disable the verification (not
  recommended) or to set it to a path including their CA certificate.
2024-09-23 18:27:02 +02:00
..
add-driver-runpath addDriverRunpath: init 2023-12-03 07:22:51 -08:00
agda build-support/agda: expose mkLibraryFile 2024-07-04 14:51:30 +02:00
alternatives treewide: simplify exec format conditionals 2024-01-07 17:43:33 -08:00
appimage appimage-run: Add libsecret for bitwarden 2024-09-22 23:08:36 -05:00
binary-cache
bintools-wrapper Clean up cross bootstrapping 2024-09-06 10:26:56 -04:00
build-bazel-package buildBazelPackage: support fetchAttrs.hash 2024-09-17 06:34:07 +00:00
build-fhsenv-bubblewrap buildFHSEnv: use relative symlinks (#330712) 2024-08-29 20:57:43 +03:00
build-fhsenv-chroot treewide: remove unused with statements from maintainer lists 2024-07-29 10:06:20 +08:00
build-graalvm-native-image buildGraalvmNativeImage: fix UTF-8 encoding issue for JVM dependencies 2024-01-26 11:12:54 +00:00
buildenv treewide: use a consistent meta.priority default 2024-08-29 09:04:57 -07:00
cc-wrapper {cc-wrapper,gcc}: drop unused logic and patches 2024-09-15 02:45:00 +01:00
compress-drv compressDrv: fix a confusing comment 2024-08-21 21:52:00 +03:00
coq ocamlPackages.elpi: use release tarball (#343266) 2024-09-23 09:52:07 +02:00
dart dartHooks.dartInstallHook: Add trailing newline 2024-01-18 12:17:43 +11:00
deterministic-uname Merge master into staging-next 2024-06-07 00:02:15 +00:00
dev-shell-tools nixosTests.docker-tools-nix-shell: Enable on aarch64-linux 2024-07-29 00:23:05 +02:00
dhall
dlang dub-to-nix: update recommended regen command 2024-09-20 23:26:41 +02:00
docker virtualisation.oci-containers: Add new imageStream option (#335430) 2024-08-24 04:38:27 +02:00
dotnet addNuGetDeps: fix fetch-deps output path handling 2024-09-17 01:14:28 -03:00
expand-response-params expand-response-params: add description 2024-04-18 20:49:13 +02:00
fake-nss
fetch9front
fetchbitbucket
fetchbower
fetchbzr
fetchcvs
fetchdarcs
fetchdebianpatch
fetchdocker
fetchfirefoxaddon
fetchfossil fetchfossil: support SRI hashes 2023-11-22 09:47:57 +01:00
fetchgit fetchgit: factor-out the hash logic to lib.fetchers.withNormalizedHash 2024-09-17 08:31:36 +00:00
fetchgitea
fetchgithub fetchFromGitHub: fix compatibility issue with nix-prefetch 2024-01-30 12:21:13 +01:00
fetchgitiles
fetchgitlab Merge pull request #268304 from panicgh/fetchgitlab-sparse-forcegit 2023-12-17 03:34:52 +01:00
fetchgitlocal
fetchgx
fetchhg
fetchipfs
fetchmavenartifact
fetchmtn
fetchnextcloudapp fetchNextcloudApp: use fetchurl by default 2024-08-05 03:53:38 -07:00
fetchpatch fetchpatch: add patchutils to nativeBuildInputs 2024-07-01 18:09:00 +03:00
fetchpijul build-support/fetchpijul: Enable strictDeps 2023-12-06 18:40:07 +01:00
fetchpypi
fetchpypilegacy fetchPypiLegacy: Pass cacert to enable TLS verification when username/password is used 2024-08-14 13:22:31 +12:00
fetchrepoorcz
fetchrepoproject fetchRepoProject: support hash attribute, wrapping in withnormalizedHash 2024-09-17 06:34:00 +00:00
fetchs3
fetchsavannah
fetchsourcehut Avoid top-level with ...; in pkgs/build-support/fetchsourcehut/default.nix 2024-03-19 22:31:19 +01:00
fetchsvn fetchsvn: remove with statements 2024-08-18 06:31:14 -07:00
fetchsvnrevision
fetchsvnssh
fetchtorrent treewide: remove unused lib (and other) arguments 2024-07-26 11:18:09 +02:00
fetchurl fetchurl: enable TLS verification when credentials are used 2024-09-23 18:27:02 +02:00
fetchzip fetchzip: allow dropping unzip 2024-01-12 20:26:16 +01:00
go buildGoModule: use lib.toExtension 2024-09-14 21:47:59 +08:00
icon-conv-tools
kernel makeInitrdNG: fixup contents documentation 2024-09-10 15:31:48 -04:00
lib build-support/meson: explicitly use ambiant CMake during cross compilation 2024-05-11 13:32:14 +02:00
libredirect libredirect: use llvmPackages unconditionally 2024-07-13 10:59:41 -04:00
make-darwin-bundle
make-desktopitem make-desktopitem: fix file extension for type directory 2024-07-03 23:23:30 +08:00
make-hardcode-gsettings-patch makeHardcodeGsettingsPatch: Support applying patches 2023-11-21 08:42:47 +01:00
make-pkgconfigitem treewide: Remove indefinite article from meta.description 2024-06-09 23:07:45 +02:00
make-startupitem make-startupitem: fix {prepend,append}ExtraArgs for Exec without arguments 2024-08-18 12:28:06 +02:00
mitm-cache mitm-cache: init at 0.1.1 2024-07-12 18:24:47 +07:00
mkshell doc: add explanatory code comment 2023-11-13 20:59:33 +01:00
mono-dll-fixer
nix-gitignore Avoid top-level with ...; in pkgs/build-support/nix-gitignore/default.nix 2024-03-19 22:31:19 +01:00
node yarnInstallHook: fix temporary directory location 2024-09-17 16:01:33 -03:00
nuke-references nuke-references: add meta.mainProgram 2024-01-05 15:04:14 -05:00
ocaml build-support/ocaml: deprecate minimumOCamlVersion (#319907) 2024-06-21 10:29:31 +02:00
oci-tools ociTools.buildContainer: writeReferencesToFile -> writeClosure 2024-03-19 05:30:54 +08:00
php build-support/php: fix typo 2024-09-23 11:41:15 +02:00
pkg-config-wrapper pkg-config: set prefixed mainProgram for cross compilation 2024-04-04 14:55:10 -04:00
portable-service
prefer-remote-fetch prefer-remote-fetch: add more fetchers which prefer local builds 2023-11-29 10:25:20 +01:00
references-by-popularity referenceByPopularity: rename in comment writeReferencesToFile -> writeClosure 2024-03-19 05:30:53 +08:00
release Avoid top-level with ...; in pkgs/build-support/release/default.nix 2024-03-19 22:31:19 +01:00
remove-references-to treewide: add meta.mainProgram to packages with a single binary 2024-03-19 03:14:51 +01:00
replace-secret replace-secret: add mainProgram 2023-11-26 16:27:42 +02:00
replace-vars replaceVars: init 2024-08-07 07:27:50 -07:00
rust treewide: follow editorconfig 2024-09-13 18:17:51 +03:00
setup-hooks Merge staging-next into staging 2024-08-31 06:04:54 +00:00
singularity-tools singularity-tools: make runscript modifiable 2024-08-18 00:37:37 +08:00
src-only Reapply "srcOnly: reflink if possible and preserve attributes" 2024-05-27 13:41:36 +02:00
substitute Merge pull request #291569 from Luflosi/fix-substituteAll-typo 2024-04-04 18:07:15 +08:00
substitute-files
testers Merge pull request #334995 from pbsds/fix-test-version-1723771306 2024-08-17 07:53:03 -07:00
trivial-builders tests.trivial-builders: Prevent rebuilds when Nix files change 2024-08-25 04:59:11 +02:00
vm vmTools: allow qemu to be overridden via customQemu argument 2024-07-08 19:47:08 +01:00
wrapper-common
writers Format: pkgs.writers 2024-09-14 19:23:41 +02:00
checkpoint-build.nix checkpointBuildTools.prepareCheckpointBuild: stop at install 2024-03-13 20:11:31 +08:00
closure-info.nix closureInfo: handle empty path set explicitly 2023-11-04 09:54:41 +01:00
make-impure-test.nix
plugins.nix
replace-dependency.nix Avoid top-level with ...; in pkgs/build-support/replace-dependency.nix 2024-03-19 22:31:19 +01:00
setup-systemd-units.nix
source-from-head-fun.nix