Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

builtin:fetchurl: Enable TLS verification (backport #11585) #11586

Merged
merged 3 commits into from
Sep 25, 2024
Merged

builtin:fetchurl: Enable TLS verification (backport #11585) #11586

merged 3 commits into from
Sep 25, 2024

Commits on Sep 25, 2024

  1. builtin:fetchurl: Enable TLS verification 

    This is better for privacy and to avoid leaking netrc credentials in a
MITM attack, but also the assumption that we check the hash no longer
holds in some cases (in particular for impure derivations).

Partially reverts 5db358d.

(cherry picked from commit c04bc17)
    @edolstra @mergify
    edolstra authored and mergify[bot] committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    c65ce6c View commit details
    Browse the repository at this point in the history

  2. Add release note 

    (cherry picked from commit 7b39cd6)
    @edolstra
    edolstra committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    5e76cdb View commit details
    Browse the repository at this point in the history

  3. Typo 

    (cherry picked from commit ef89879)
    @edolstra
    edolstra committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    798e0bc View commit details
    Browse the repository at this point in the history