From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id eFhFMCZ5+mCWywAAgWs5BA (envelope-from ) for ; Fri, 23 Jul 2021 10:09:10 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 8D32KyZ5+mCmHwAAB5/wlQ (envelope-from ) for ; Fri, 23 Jul 2021 08:09:10 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 3783F29D5F for ; Fri, 23 Jul 2021 10:09:10 +0200 (CEST) Received: from localhost ([::1]:42014 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1m6qF3-0005Cu-B0 for larch@yhetil.org; Fri, 23 Jul 2021 04:09:09 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33130) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m6qEz-0005CW-Pc for guix-patches@gnu.org; Fri, 23 Jul 2021 04:09:05 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:58907) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1m6qEw-0000Qp-NB for guix-patches@gnu.org; Fri, 23 Jul 2021 04:09:05 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1m6qEw-00058j-Ic for guix-patches@gnu.org; Fri, 23 Jul 2021 04:09:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#49706] [PATCH] gnu: gmnisrv: Update to commit 32854b7. Resent-From: Sarah Morgensen Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 23 Jul 2021 08:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49706 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 49706@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.162702771519722 (code B ref -1); Fri, 23 Jul 2021 08:09:02 +0000 Received: (at submit) by debbugs.gnu.org; 23 Jul 2021 08:08:35 +0000 Received: from localhost ([127.0.0.1]:42220 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m6qEV-000582-GN for submit@debbugs.gnu.org; Fri, 23 Jul 2021 04:08:35 -0400 Received: from lists.gnu.org ([209.51.188.17]:57744) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m6qET-00057u-II for submit@debbugs.gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33090) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m6qET-00059D-EN for guix-patches@gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 Received: from out2.migadu.com ([2001:41d0:2:aacc::]:28449) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m6qEQ-0008QD-Hu for guix-patches@gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mgsn.dev; s=key1; t=1627027709; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=a98kIrRemIPBmKVMux2/VWr4Jt8HV92ShV3neWUHEPw=; b=W7SjKEe0N0Cgk3od5PSP7CiMRrYK23yMSVb8OeQIR9KEI+4ncx2g41zoMuIirUtA/Jbbr5 PczTwBA/wiM+mbs9GC7MvvIiVRlZr5jLfi4UrTC7BJGX/uxC74v4c+QTLl46o/CmmyGEsF Yk0RAGi4H3OBFiB+abRZkpGJwV3jXos= From: Sarah Morgensen Date: Fri, 23 Jul 2021 01:08:28 -0700 Message-Id: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Migadu-Auth-User: iskarian@mgsn.dev Received-SPF: pass client-ip=2001:41d0:2:aacc::; envelope-from=iskarian@mgsn.dev; helo=out2.migadu.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1627027750; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=a98kIrRemIPBmKVMux2/VWr4Jt8HV92ShV3neWUHEPw=; b=BWbhc1LvetZFvllTuNuAQ5QKswRdGSqhfUMnpTb/WaGgNFSG14WAz0iicN7pikBOma8FuK jNlt1m6iDte2Itgq2m6vEwdGF4wUhFAH0raWRlK/TrLUIf3IYfsvaJ7qUrzYf2Y48i5aY3 CeU99Dzsa7jQ2OraRDavXGGCmRzznsXxQF2C5MAXjRuoGLxI/NVnNL0rbCgn225WSUf04j NbAoqq+eBhztmg65QOVtK/oOKH0ZrbhLX2Y1n9BDq68vHglb3YG9RQHkivGHaIUYdJxq4g BOiJfso8mj9zn2Jx4n3qNp81B8+rwj3h570HLdgZYb3KmN2p/Nwhkaiz69/S4Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1627027750; a=rsa-sha256; cv=none; b=NO11nDEJKrUzCKN+eEtsdU4ibTb8XPafdxx+xiV1IRKEpZRQf60Rt+pwDcCIle6MymxZHz BNCyzZpSvjN6o598MiP8G0E/SuDUpYFTh5GFngCLX+JzLr4Tchfm16aCeOMZpu0FoZ7/BB A/QG+/L49pY+J29aH2G+dRHPKRcOVbpx1dcowa4QJn0oYqGyao4mkLmuz/bR0VKT6BrYH5 RTZgKd5mU9I5JsV1qGs8jBwnopMai1TKQCsp6ShJ12ahfg1TmxJRAMxcoElkTFXJhN/r2S 5OHVgByDPUUulCU1dtmO9aEwQ7VYW3Fho5Z10a4c4LWsS3UyWOgeLO9jj9Lj7w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=mgsn.dev header.s=key1 header.b=W7SjKEe0; dmarc=fail reason="SPF not aligned (relaxed)" header.from=mgsn.dev (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: 3.68 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=mgsn.dev header.s=key1 header.b=W7SjKEe0; dmarc=fail reason="SPF not aligned (relaxed)" header.from=mgsn.dev (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 3783F29D5F X-Spam-Score: 3.68 X-Migadu-Scanner: scn0.migadu.com X-TUID: AarJgyovmkmA Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so "requires fresh certificates, which could break clients with strict trust-on-first-use policies." gnu/packages/web.scm (gmnisrv): Update to commit 32854b7. --- Hello Guix, There is one possibly breaking change in this update: > Use v3 X509 certificate > > This fixes an issue where rustls failed to validate the X509v1 certificate. > > Tested with Amfora, av-98, and titan (https://github.com/mkeeter/titan) > > This requires fresh certificates, which could break clients with strict > trust-on-first-use policies; unfortunately, it doesn't appear to be possible > to migrate v1 certificates to v3. Also, I'm not sure if this is the correct style for updating unversioned software, so if I missed something, please let me know! -- Sarah gnu/packages/web.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 12ba55cdc8..270ad31331 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -7968,8 +7968,8 @@ solution for any project's interface needs: (license license:expat))) (define-public gmnisrv - (let ((commit "d484ba0ab0020866535a44be5948c9482b8f2b8d") - (revision "1")) + (let ((commit "32854b79c73b278bf33eb5123abf1c36abdc7c01") + (revision "2")) (package (name "gmnisrv") (version (git-version "0" revision commit)) @@ -7981,7 +7981,7 @@ solution for any project's interface needs: (commit commit))) (sha256 (base32 - "11phipixsxx1jgm42agp76p5s68l0zj65kgb41vzaymgwcq79ivn")) + "0lbb3ablwkdcgm1cjr1hikr55y8gpl420nh8b8g9wn4abhm2xgr9")) (file-name (git-file-name name version)))) (build-system gnu-build-system) (arguments base-commit: 89ea0918a4a6cc9c250b85c0b713e471b7769c48 prerequisite-patch-id: 2d6692cc3cf8a733e69e6ff6b02863a160b03011 -- 2.31.1