guix-devel/doc
Ludovic Courtès bc3c41ce36
download: Verify TLS certificates unless asked not to.
Fixes <http://bugs.gnu.org/24466>.
Reported by Leo Famulari <leo@famulari.name>.

* guix/build/download.scm (%x509-certificate-directory): New variable.
(make-credendials-with-ca-trust-files, peer-certificate)
(assert-valid-server-certificate, print-tls-certificate-error): New
procedures.  Add 'print-tls-certificate-error' as an exception printer
for 'tls-certificate-error'.
(tls-wrap): Add #:verify-certificate? parameter and honor it.
(open-connection-for-uri): Likewise.
(http-fetch): Likewise.
(url-fetch): Likewise.
* guix/download.scm (url-fetch)[builder]: Pass #:verify-certificate? #f.
* guix/scripts/lint.scm (probe-uri): Add case for 'tls-certificate-error'.
(validate-uri): Likewise.
* doc/guix.texi (Invoking guix download): Mention 'SSL_CERT_DIR'.
2016-11-07 23:39:01 +01:00
..
images guix system: Rename 'dmd-graph' to 'shepherd-graph'. 2016-01-29 20:21:54 +03:00
contributing.texi doc: Discourage software bundling. 2016-07-28 15:41:00 +02:00
emacs.texi doc: emacs: Clarify 'guix-use-substituse' and 'guix-dry-run'. 2016-10-23 13:02:32 +08:00
environment-gdb.scm doc: Add 'guix environment' examples. 2015-06-29 23:08:36 +02:00
fdl-1.3.texi doc: Add the stub of a manual. 2012-10-13 16:05:01 +02:00
guix.texi download: Verify TLS certificates unless asked not to. 2016-11-07 23:39:01 +01:00
htmlxref.cnf doc: Update Texinfo HTML cross-reference file.. 2016-08-03 16:00:09 +02:00
local.mk build: Use "%D%" in Makefile fragments. 2016-05-24 13:07:19 +02:00
package-hello.scm doc: Use the recommended Scheme format. 2015-09-14 23:10:58 +02:00