From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:40833) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dyH7n-0004gm-OT for guix-patches@gnu.org; Sat, 30 Sep 2017 08:44:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dyH7i-0000NP-QB for guix-patches@gnu.org; Sat, 30 Sep 2017 08:44:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:59667) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dyH7i-0000Lw-Mn for guix-patches@gnu.org; Sat, 30 Sep 2017 08:44:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dyH7i-0002C5-AO for guix-patches@gnu.org; Sat, 30 Sep 2017 08:44:02 -0400 Subject: [bug#28170] Add gnutls/dane + use it where its needed (gnurl, libmicrohttpd, gnunet) Resent-Message-ID: Date: Sat, 30 Sep 2017 13:43:46 +0100 From: Christopher Baines Message-ID: <20170930134346.54a4c54a@cbaines.net> In-Reply-To: <20170930122309.akl2dxa46eru36pb@abyayala> References: <20170821095726.qtf2ko526nup4yba@abyayala> <20170930122616.17079913@cbaines.net> <20170930122309.akl2dxa46eru36pb@abyayala> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/Gwm4SgiHbPVGeOakIs94FcO"; protocol="application/pgp-signature" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: ng0 Cc: 28170@debbugs.gnu.org --Sig_/Gwm4SgiHbPVGeOakIs94FcO Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sat, 30 Sep 2017 12:23:09 +0000 ng0 wrote: > Christopher Baines transcribed 2.1K bytes: > > On Mon, 21 Aug 2017 09:57:26 +0000 > > ng0 wrote: > > =20 > > > The dependency chain of GNUnet demands GnuTLS with DANE support. > > > You can use it without DANE, but there are certain parts which > > > will not work. DANE is recommended. (ports of FREEBSD uses > > > gnutls-dane for libmicrohttpd aswell for example). =20 > > =20 > > > From c9dedfd1a6f91d557006b00505a428be84102b1e Mon Sep 17 00:00:00 > > > 2001 From: ng0 > > > Date: Mon, 21 Aug 2017 09:28:51 +0000 > > > Subject: [PATCH 1/4] gnu: gnutls: Add 'gnutls-dane'. > > >=20 > > > * gnu/packages/tls.scm (gnutls/dane): New variable. =20 > >=20 > > Hey, so I'm trying to do some reviewing. > >=20 > > What was your reasoning for creating a new gnutls/dane package, > > rather than adding unbound to the existing gnutls package? > >=20 > > I don't know much about GnuTLS, but it would be good to make it > > clear why this approach was taken, especially in the commit message > > and by the gnutls/dane package definition. =20 >=20 > Honestly, I did not want to touch the gnutls package for this. > I wanted to leave the option open to have gnutls without dane. > Sure, it's a useful feature. If you think I should apply it > directly to gnutls, tell me and I'll send a new patch. I'm happy with that reason, if you could put that in the relevant commit message, or in a comment by the gnutls/dane package definition (or both), I'll check I can build all the changed packages, and push if they all build for me. --Sig_/Gwm4SgiHbPVGeOakIs94FcO Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAlnPkYJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XdiqBAAiQj1ui5TojU1N68L2Zpd3qWWVTOlMkn2NuvveGVjhLH071N9R9H+sV9v mpaC8RkEq0oIlqTxjzQsB5GUvuMhS7FlvC3XsILTbAlL/gBYvK1R7k23cngLgpQO KyspkSTaBMRAaxQHTZez/2z+YUJszKqgaLaJuoWqWf1GDs7RGUAhcvo4ljrr9CnC v3V6GUanV67wM5ynUSIKmmWqDt2mgUJf3Gn2Gp3mAio++v52W8ndzCGWEphMG5wA oOiEEXOIDp98QA9T3k7T3M+LN57O4AZJpxizcfpxXq2Sv3pcUTPUA0MwJsL9DD88 JsvJkPcddyEe6LiQwMZD/u+kg+uuCjztpJvrRf8REkap+J3IWZp/gun6Z99Y+wwO +mHH3ngAJUZmlKVG9H8DfRzZQd6PSDgFw9JeWQi+Veb40RvljdL+Q8wq8ZNH94/i 1203BkPfkoxLUuviJaCOVhhfha2Rx6klvE76SOdComRLuhUWgHbLqWSKg06GDIRl ++Hgs+IN1WshZLcKIn35JnpFgU4a8H7tN7MKoaGW5EzUlwjmJu5HPLiyeU5TvgXl 5eXDurOTij4sGLt+/QGauepQVF8u7BfVaU69APTbSyW/uolnRQWuD23yHNR6IpTY SSNBK5J3QPFM07vGvruYse4OC1upbiskuAq3sFKNZiQkdq4fevs= =AGVv -----END PGP SIGNATURE----- --Sig_/Gwm4SgiHbPVGeOakIs94FcO--