Thomas Gerbet 4fa7aadebd fetchurl: enable TLS verification when credentials are used ... This make sure the credentials cannot be leaked in a MITM attack. Note that this change might break some existing deployments if the users tries to fetch resources on endpoints with invalid certificates. The impacted users will have the following choices: * fix the endpoint providing the resource * override SSL_CERT_FILE to either disable the verification (not recommended) or to set it to a path including their CA certificate. (cherry picked from commit a169553f7e)		2024-09-24 14:15:40 +02:00
..
add-driver-runpath	addDriverRunpath: init	2023-12-03 07:22:51 -08:00
add-opengl-runpath
agda	haskellPackages.Agda: Split outputs to reduce closure size	2024-04-07 16:36:57 +03:00
alternatives	treewide: simplify exec format conditionals	2024-01-07 17:43:33 -08:00
appimage	wrapAppImage: default extraPkgs to pkgs: [ ]	2024-05-13 20:32:47 +02:00
binary-cache
bintools-wrapper	openbsd: Add static linking support	2024-07-10 09:48:00 -04:00
build-bazel-package
build-fhsenv-bubblewrap	buildFHSEnv: export GST_PLUGIN_SYSTEM_PATH_1_0	2024-06-20 17:48:59 -05:00
build-fhsenv-chroot	build-fhs-user-env: add compatibility for pipewire alsa emulation	2024-02-02 22:38:49 -08:00
build-graalvm-native-image	buildGraalvmNativeImage: fix UTF-8 encoding issue for JVM dependencies	2024-01-26 11:12:54 +00:00
buildenv	build-support/buildenv: Hoist builder instantiation	2023-12-29 03:04:46 +13:00
cc-wrapper	treewide: Fix remaining Android sdkVer and ndkVer references (#341106)	2024-09-10 22:09:40 +00:00
coq	mkCoqDerivation: fix install path of ML plug-in built w/ dune	2024-07-09 07:29:35 +02:00
dart	dartHooks.dartInstallHook: Add trailing newline	2024-01-18 12:17:43 +11:00
deterministic-uname	deterministic-uname: Overridable platform	2024-06-06 19:10:09 +00:00
dhall
dlang	dub-to-nix,buildDubPackage: allow git-type dependencies	2024-05-08 14:01:35 +02:00
docker	Merge pull request #292760 from PigeonF/dockertools-build-layered-compressor	2024-04-08 09:24:18 +02:00
dotnet	buildDotNetGlobalTool: add SRI hash support	2024-08-20 20:34:04 -03:00
emacs	Merge branch 'master' into staging-next	2023-12-31 02:31:32 +01:00
expand-response-params	expand-response-params: add description	2024-04-18 20:49:13 +02:00
fake-nss
fetch9front
fetchbitbucket
fetchbower
fetchbzr
fetchcvs
fetchdarcs
fetchdebianpatch
fetchdocker
fetchfirefoxaddon
fetchfossil
fetchgit	fetchgit: Support fetching signed tags over dumb http transport	2024-04-22 02:16:02 +02:00
fetchgitea
fetchgithub	fetchFromGitHub: fix compatibility issue with nix-prefetch	2024-01-30 12:21:13 +01:00
fetchgitiles
fetchgitlab	Merge pull request #268304 from panicgh/fetchgitlab-sparse-forcegit	2023-12-17 03:34:52 +01:00
fetchgitlocal
fetchgx
fetchhg
fetchipfs
fetchmavenartifact
fetchmtn
fetchnextcloudapp	nextcloudPackages: update	2024-08-02 10:14:47 +02:00
fetchpatch
fetchpijul	build-support/fetchpijul: Enable strictDeps	2023-12-06 18:40:07 +01:00
fetchpypi
fetchpypilegacy	fetchPypiLegacy: Pass cacert to enable TLS verification when username/password is used	2024-08-14 02:21:46 +00:00
fetchrepoorcz
fetchrepoproject	Avoid top-level with ...; in pkgs/build-support/fetchrepoproject/default.nix	2024-03-19 22:31:19 +01:00
fetchs3
fetchsavannah
fetchsourcehut	Avoid top-level with ...; in pkgs/build-support/fetchsourcehut/default.nix	2024-03-19 22:31:19 +01:00
fetchsvn
fetchsvnrevision
fetchsvnssh
fetchtorrent	tests.fetchtorrent: add watched-cd license	2023-12-02 02:04:50 +01:00
fetchurl	fetchurl: enable TLS verification when credentials are used	2024-09-24 14:15:40 +02:00
fetchzip	fetchzip: allow dropping unzip	2024-01-12 20:26:16 +01:00
flutter	treewide: wrapGAppsHook → wrapGAppsHook3	2024-04-27 02:23:22 +02:00
go	Merge branch 'staging-next' into staging	2024-05-03 19:03:51 +02:00
icon-conv-tools
install-shell-files
kernel	nixos/udev: compress firmware with zstd if possible	2024-04-19 16:46:25 +02:00
lib	build-support/meson: explicitly use ambiant CMake during cross compilation	2024-05-11 13:32:14 +02:00
libredirect	libredirect: don't test LFS64 functions on musl	2024-03-02 01:02:36 +01:00
make-darwin-bundle
make-desktopitem
make-hardcode-gsettings-patch
make-pkgconfigitem
make-startupitem	make-startupitem: fix {prepend,append}ExtraArgs for Exec without arguments	2024-08-19 02:57:09 +00:00
mkshell
mono-dll-fixer
nix-gitignore	Avoid top-level with ...; in pkgs/build-support/nix-gitignore/default.nix	2024-03-19 22:31:19 +01:00
node	prefetch-npm-deps: switch to data-encoding	2024-04-22 23:14:15 +10:00
nuke-references	nuke-references: add meta.mainProgram	2024-01-05 15:04:14 -05:00
ocaml
oci-tools	ociTools.buildContainer: writeReferencesToFile -> writeClosure	2024-03-19 05:30:54 +08:00
php	php.packages.composer: do not use buildComposerProject	2024-06-11 05:55:35 +00:00
pkg-config-wrapper	pkg-config: set prefixed mainProgram for cross compilation	2024-04-04 14:55:10 -04:00
portable-service
prefer-remote-fetch	prefer-remote-fetch: add more fetchers which prefer local builds	2023-11-29 10:25:20 +01:00
references-by-popularity	referenceByPopularity: rename in comment writeReferencesToFile -> writeClosure	2024-03-19 05:30:53 +08:00
release	Avoid top-level with ...; in pkgs/build-support/release/default.nix	2024-03-19 22:31:19 +01:00
remove-references-to	treewide: add meta.mainProgram to packages with a single binary	2024-03-19 03:14:51 +01:00
replace-secret	replace-secret: add mainProgram	2023-11-26 16:27:42 +02:00
rust	build-support/rust: rewrite workspace dependency inheritance	2024-05-10 20:55:39 +03:00
setup-hooks	separateDebugInfo: tell rustc not to strip	2024-07-28 12:16:04 +02:00
singularity-tools	singularity-tools.buildImage: increase default memSize	2024-06-02 22:34:19 +00:00
src-only
substitute	Merge pull request #291569 from Luflosi/fix-substituteAll-typo	2024-04-04 18:07:15 +08:00
substitute-files
testers	testers.shellcheck: init	2024-07-28 11:31:41 +00:00
trivial-builders	Merge pull request #300538 from ShamrockLee/write-shell-application-extra	2024-04-22 22:45:44 +02:00
vm	linux kernel: prefer zstd where possible	2024-04-19 16:45:35 +02:00
wrapper-common
writers	Avoid top-level with ...; in pkgs/build-support/writers/test.nix	2024-03-19 22:31:19 +01:00
build-maven.nix
checkpoint-build.nix	checkpointBuildTools.prepareCheckpointBuild: stop at install	2024-03-13 20:11:31 +08:00
closure-info.nix
make-impure-test.nix
plugins.nix
replace-dependency.nix	Avoid top-level with ...; in pkgs/build-support/replace-dependency.nix	2024-03-19 22:31:19 +01:00
setup-systemd-units.nix
source-from-head-fun.nix