scriptis/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity
lix/src/libstore
History
Eelco Dolstra c1631b0a39 [security] builtin:fetchurl: Enable TLS verification 
This is better for privacy and to avoid leaking netrc credentials in a
MITM attack, but also the assumption that we check the hash no longer
holds in some cases (in particular for impure derivations).

Partially reverts 5db358d4d7.

(cherry picked from commit c04bc17a5a0fdcb725a11ef6541f94730112e7b6)
(cherry picked from commit f2f47fa725fc87bfb536de171a2ea81f2789c9fb)
(cherry picked from commit 7b39cd631e0d3c3d238015c6f450c59bbc9cbc5b)

Upstream-PR: https://github.com/NixOS/nix/pull/11585

Change-Id: Ia973420f6098113da05a594d48394ce1fe41fbb9
2024-09-25 18:40:58 -07:00
..
build libstore: turn Worker in a kj event loop user 2024-09-08 01:57:48 +00:00
builtins [security] builtin:fetchurl: Enable TLS verification 2024-09-25 18:40:58 -07:00
platform tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
binary-cache-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
binary-cache-store.hh libstore: rewrite narFromPath as generator 2024-07-15 21:50:25 +00:00
build-result.cc libstore: move Goal::getBuildResult to BuildResult 2024-07-30 16:37:13 +00:00
build-result.hh libstore: move Goal::getBuildResult to BuildResult 2024-07-30 16:37:13 +00:00
builtins.hh
ca-specific-schema.sql
common-protocol-impl.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
common-protocol.cc libstore: generatorize protocol serializers 2024-07-16 00:57:42 +00:00
common-protocol.hh libstore: remove WriteConn::sink fields 2024-07-16 00:57:42 +00:00
content-address.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
content-address.hh Fix various clang-tidy lints 2024-03-29 20:26:38 -07:00
crypto.cc tree-wide: automated migration to charptr_cast 2024-08-08 14:53:17 -07:00
crypto.hh util.hh: Delete remaining file and clean up headers 2024-05-29 12:38:51 +02:00
daemon.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
daemon.hh
derivations.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
derivations.hh doc: rewrite the multi-user documentation to actually talk about security 2024-06-12 15:34:23 -07:00
derived-path-map.cc
derived-path-map.hh pragma once and ///@file everything missing it 2024-04-08 15:40:12 -07:00
derived-path.cc derived-path: refuse built derived path with a non-derivation base 2024-05-17 02:16:15 +02:00
derived-path.hh tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
downstream-placeholder.cc refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
downstream-placeholder.hh
dummy-store.cc libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
dummy-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
dummy-store.md
export-import.cc refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
filetransfer.cc util: fix brotli decompression of empty input 2024-09-18 15:37:29 -07:00
filetransfer.hh tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
fs-accessor.hh
gc-store.hh libstore: Create platform LocalStore subclasses 2024-04-23 16:17:05 +00:00
gc.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
globals.cc libstore: declare SandboxMode JSON serialisation in the header 2024-09-02 18:50:14 +02:00
globals.hh Merge changes If8ec210f,I6e2851b2 into main 2024-09-09 16:14:23 +00:00
http-binary-cache-store.cc libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
http-binary-cache-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
http-binary-cache-store.md
indirect-root-store.hh
legacy-ssh-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
legacy-ssh-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
legacy-ssh-store.md
length-prefixed-protocol-helper.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
lix-store.pc.in packaging: rename nixexpr -> lixexpr and so on 2024-05-23 16:45:23 -06:00
local-binary-cache-store.cc libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
local-binary-cache-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
local-binary-cache-store.md
local-fs-store.cc libstore: rewrite narFromPath as generator 2024-07-15 21:50:25 +00:00
local-fs-store.hh libutil/config: unify path setting types 2024-08-21 17:57:23 +02:00
local-store.cc Merge "local-store: make extended attribute handling more robust" into main 2024-09-21 07:55:13 +00:00
local-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
local-store.md
lock.cc store: add a hint on how to fix Lix installs broken by macOS Sequoia 2024-09-14 07:31:30 +00:00
lock.hh tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
log-store.cc
log-store.hh
machines.cc tree-wide: fix various lint warnings 2024-08-04 20:55:45 -07:00
machines.hh tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
make-content-addressed.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
make-content-addressed.hh
meson.build libstore: turn Worker in a kj event loop user 2024-09-08 01:57:48 +00:00
misc.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
names.cc Use std::strong_ordering for version comparison 2024-07-12 16:48:28 +02:00
names.hh Use std::strong_ordering for version comparison 2024-07-12 16:48:28 +02:00
nar-accessor.cc archive: refactor bad mutable-state API in the NAR parse listener 2024-09-13 17:11:43 -07:00
nar-accessor.hh tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
nar-info-disk-cache.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
nar-info-disk-cache.hh
nar-info.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
nar-info.hh
optimise-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
outputs-spec.cc util.hh: Delete remaining file and clean up headers 2024-05-29 12:38:51 +02:00
outputs-spec.hh
parsed-derivations.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
parsed-derivations.hh
path-info.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
path-info.hh Merge pull request #9238 from tfc/small-improvements2 2024-03-04 05:18:05 +01:00
path-references.cc refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
path-references.hh pragma once and ///@file everything missing it 2024-04-08 15:40:12 -07:00
path-regex.hh Disallow store path names that are . or .. (plus opt. -) 2024-05-02 19:34:38 +02:00
path-with-outputs.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
path-with-outputs.hh
path.cc treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
path.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
pathlocks.cc util.hh: Delete remaining file and clean up headers 2024-05-29 12:38:51 +02:00
pathlocks.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
platform.cc libstore: add "is dependency" info to goal 2024-08-30 10:18:28 +00:00
profiles.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
profiles.hh chore: rebrand Nix to Lix when it makes sense 2024-06-01 20:31:24 +02:00
realisation.cc libutil: de-callback-ify computeClosure 2024-05-07 14:35:20 +00:00
realisation.hh refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
remote-fs-accessor.cc libstore: rewrite narFromPath as generator 2024-07-15 21:50:25 +00:00
remote-fs-accessor.hh
remote-store-connection.hh libstore: remove WriteConn::sink fields 2024-07-16 00:57:42 +00:00
remote-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
remote-store.hh refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
s3-binary-cache-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
s3-binary-cache-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
s3-binary-cache-store.md
s3.hh
schema.sql
serve-protocol-impl.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
serve-protocol.cc refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
serve-protocol.hh libstore: remove WriteConn::sink fields 2024-07-16 00:57:42 +00:00
sqlite.cc sqlite: add a Use::fromStrNullable 2024-08-08 14:53:17 -07:00
sqlite.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
ssh-store.cc tree-wide: shuffle headers around for about 30s compile time 2024-08-28 09:55:05 -07:00
ssh-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
ssh-store.md
ssh.cc libstore/ssh: only resume the logger when we paused it 2024-08-02 18:38:14 +02:00
ssh.hh util.{hh,cc}: Split out processes.{hh,cc} 2024-05-29 11:01:34 +02:00
store-api.cc Merge changes Ia1481da4,Ifca1d74d into main 2024-09-14 19:26:08 +00:00
store-api.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
store-cast.hh
uds-remote-store.cc libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
uds-remote-store.hh libstore: remove static initializers for Store registrations 2024-08-26 16:27:31 -07:00
uds-remote-store.md
worker-protocol-impl.hh treewide: fix a bunch of lints 2024-08-26 16:13:03 -07:00
worker-protocol.cc refactor: make HashType and Base enum classes for type safety 2024-08-08 14:53:17 -07:00
worker-protocol.hh libstore: remove WriteConn::sink fields 2024-07-16 00:57:42 +00:00