1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-24 14:41:17 +00:00
nixpkgs/pkgs/tools/security
Alyssa Ross c727083e65
gnupg: change default keyserver to non-SKS
See https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f.

The SKS network is vulnerable to certificate poisoning, which can
destroy GnuPG installations. keys.openpgp.org is a new non-SKS keyserver
that is resistant to this type of attack.

With such an attack being possible, it is unsafe to use SKS keyservers
for almost anything, and so we should protect our users from a now
unsafe default. keys.openpgp.org offers some (but not all) functionality
of SKS, and is better than nothing.

This default is only present in gnupg22. gnupg20 and gnupg1orig are not
affected.
2019-06-30 14:09:02 +00:00
..
2fa go-2fa: Init at 1.1.0 2018-09-26 11:36:02 +02:00
acsccid acsccid: init at 1.1.6 2018-11-08 10:44:50 +00:00
aespipe
afl afl: add self to maintainers list 2019-04-10 22:23:08 +01:00
aide aide: 0.16.1 -> 0.16.2 2019-05-31 20:29:11 -07:00
apg
asc-key-to-qr-code-gif qrencode: merge with libqrencode 2019-01-01 17:19:07 +01:00
aws-iam-authenticator aws-iam-authenticator 2018-07-29 -> 0.4.0 2019-05-05 12:14:54 -05:00
aws-okta aws-okta: 0.19.0 -> 0.20.1 2019-04-21 10:29:22 -04:00
b2sum treewide: Remove usage of isNull 2019-04-29 14:05:50 +02:00
bash-supergenpass
bettercap bettercap: 2.11 -> 2.24 (#61215) 2019-05-17 16:05:41 +02:00
bitwarden-cli Remove nodejs-6_x which is about to enter EOL 2019-04-04 18:43:06 +01:00
bitwarden_rs bitwarden_rs-vault: 2.10.0 -> 2.10.1 2019-06-17 15:29:56 +02:00
bmrsa
browserpass treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
bruteforce-luks bruteforce-luks: 1.3.1 -> 1.3.2 2019-06-01 00:56:49 -07:00
bundler-audit bundler-audit: init at 0.6.1 2019-04-02 17:53:25 +02:00
ccid ccid: set platforms to unix (#60871) 2019-05-03 13:19:50 -04:00
ccrypt ccrypt: 1.10 -> 1.11 2018-08-08 18:59:31 -07:00
certmgr certmgr: 1.6.1 -> 1.6.4 2019-02-25 17:26:00 +01:00
certstrap
cfssl cfssl: allow building on all platforms (#48093) 2018-10-12 06:16:58 +00:00
chaps
chipsec chipsec: Kernel driver only works on x86_64-linux 2019-04-22 01:32:13 +02:00
chkrootkit chkrootkit: 0.52 -> 0.53 2019-03-21 01:21:14 -07:00
chntpw
chrome-token-signing chrome-token-signing: fix path to opensc-pkcs11 2018-12-03 17:18:21 +00:00
cipherscan
clamav clamav: 0.101.1 -> 0.101.2 (#58653) 2019-04-02 07:36:41 +00:00
cowpatty
crackxls
crunch
ctmg
diceware diceware: 0.9.5 -> 0.9.6 2018-12-26 10:34:06 +01:00
dirmngr dirmngr: add license 2018-08-05 16:27:34 +02:00
dnsenum dnsenum: init at 1.2.4.2 2019-05-20 20:46:27 +02:00
dnsrecon dnsrecon: init at 0.9.1 2019-05-20 20:48:26 +02:00
doas
duo-unix duo-unix: 1.11.1 -> 1.11.2 2019-06-23 14:58:06 +02:00
ecdsautils ecdsautils: updated source to new location 2019-01-09 22:20:19 +01:00
ecryptfs Treewide: use https for launchpad.net 2018-11-24 23:47:52 +01:00
efitools efitools: init at 1.9.2 2019-01-22 10:23:50 -05:00
eid-mw treewide: fixup bcf54ce 2019-04-12 09:09:22 +02:00
enchive
encryptr reewide: Purge all uses stdenv.system and top-level system 2018-08-30 17:20:32 -04:00
enpass treewide: mesa_noglu, mesa_drivers, libGL_driver -> mesa 2019-06-17 14:43:18 -04:00
eschalot
fail2ban fail2ban: 0.10.3.1 -> 0.10.4 2018-10-14 10:27:04 -04:00
fcrackzip
fierce fierce: init at 1.3.0 2019-05-20 20:49:28 +02:00
fpm2
fprintd fprintd: set sysconfdir 2019-05-26 14:05:11 +01:00
fprot
fwknop wget, fwknop: fixup after configureFlags refactoring 2018-08-12 10:08:46 +02:00
gen-oath-safe gen-oath-safe: 2017-06-30 -> 0.11.0 (#47633) 2018-10-02 12:47:56 +02:00
gencfsm gobject-introspection: rename package 2018-12-02 12:42:29 +01:00
ghidra ghidra: use autoPatchelfHook 2019-03-13 22:49:43 +01:00
gnu-pw-mgr Treewide: use HTTPS on GNU domains 2018-12-02 15:51:59 +01:00
gnupg gnupg: change default keyserver to non-SKS 2019-06-30 14:09:02 +00:00
gopass gopass: 1.8.4 -> 1.8.5 2019-03-13 01:33:59 -04:00
gorilla-bin tree-wide: patchelf used during build -> nativeBuildInputs 2018-09-28 11:43:16 -05:00
gpgstats
haka
hash-slinger
hash_extender
hashcash more idiomatic nix 2019-01-07 21:06:09 -05:00
hashcat hashcat: 5.0.0 -> 5.1.0 2019-05-28 11:51:43 +03:00
hashcat-utils hashcat-utils: init at 1.9 2019-05-27 11:02:56 +00:00
haveged
hcxtools hcxtools: 5.1.4 -> 5.1.6 2019-06-16 18:52:59 -07:00
hologram
ibm-sw-tpm2 ibm-sw-tpm2: init at 1332 2019-02-19 20:02:31 +01:00
ifdnfc ifdnfc: init at 2016-03-01 (#47625) 2018-10-02 00:39:48 +02:00
jd-gui treewide: use runtimeShell instead of stdenv.shell whenever possible 2019-02-26 14:10:49 +00:00
john john: 1.8.0-jumbo-1 -> 1.9.0-jumbo-1 2019-06-04 15:02:28 -05:00
kbfs Replace platforms.linux with platforms.darwin for expressions that compile on darwin too (too restrictive platforms) 2019-02-18 10:56:58 +01:00
keybase treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
knockknock
kpcli lib.makePerlPath -> perlPackages.makePerlPath 2018-12-15 03:50:31 +00:00
krunner-pass krunner-pass: fix the build 2019-05-03 15:48:54 +08:00
kwalletcli kwalletcli: fix pinentry-kwallet 2019-04-27 17:20:34 +08:00
lastpass-cli lastpass-cli: 1.3.2 -> 1.3.3 2019-04-16 10:34:01 +01:00
libacr38u
libmodsecurity libmodsecurity: 3.0.2 -> 3.0.3 2019-05-22 08:01:44 +03:00
logkeys
lynis lynis: 2.7.3 -> 2.7.4 2019-05-01 02:25:24 -07:00
masscan masscan: 1.0.4 -> 1.0.5 2018-09-04 00:25:23 +02:00
mbox
meo
metasploit metasploit: rack: 1.6.8 -> 1.6.11 2018-11-06 09:23:26 +00:00
mfcuk
mfoc mfoc: 0.10.6 -> 0.10.7 2019-04-28 17:32:00 +02:00
minisign
mkp224o mkp224o: 1.2.0 -> 1.3.0 2019-05-01 05:11:34 -07:00
mkpasswd mkpasswd: fix cross compilation 2018-11-27 17:04:40 +01:00
mkrand
mktemp mktemp: update meta data 2018-08-17 23:44:13 +02:00
modsecurity modsecurity_standalone: 2.9.2 -> 2.9.3 2019-03-10 17:50:38 -07:00
monkeysphere treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
mpw mpw: point upgrade and minor cleanups 2019-03-18 11:56:58 +08:00
munge
nasty
neopg neopg: 0.0.4 -> 0.0.6 2019-04-22 17:57:17 +02:00
nitrokey-app nitrokey-app: 1.3.1 -> 1.3.2 2018-10-08 14:28:51 +02:00
nmap nmap: fix build with new Darwin stdenv 2019-05-21 11:24:26 +09:00
notary notary: disable tests (for now) 2019-03-31 18:03:38 +02:00
nsjail nsjail: fix path to new{u|g}idmap (#51523) 2018-12-04 22:47:48 +01:00
nwipe nwipe: 0.24 -> 0.25 (#46996) 2018-09-21 17:56:11 +02:00
oath-toolkit gnome2.gtkdoc -> gtk-doc 2019-03-09 11:24:01 +00:00
omapd
onioncircuits Python: fix outfall after setting strictDeps = true; 2019-02-17 14:40:54 +01:00
open-ecard
opencryptoki
opensc opensc: add patch for CVE-2019-6502 2019-05-25 08:29:04 +02:00
ossec
p0f
pamtester
paperkey paperkey: use HTTPS 2019-06-03 13:51:02 +02:00
pass treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
passff-host passff-host: 1.0.2 -> 1.2.1 2019-05-20 08:56:59 +02:00
pcsc-cyberjack pcsc-cyberjack: Also install cjflash tool 2018-09-27 04:30:21 +02:00
pcsc-scm-scl011 reewide: Purge all uses stdenv.system and top-level system 2018-08-30 17:20:32 -04:00
pcsclite pcsclite: 1.8.24 -> 1.8.25 (#58745) 2019-04-09 21:13:17 +02:00
pcsctools Merge branch 'staging' into make-perl-pathd 2018-12-18 17:13:27 +00:00
pdfcrack pdfcrack: 0.16 -> 0.17 2019-05-01 17:11:54 -07:00
pgpdump pgpdump: broaden platforms 2019-01-25 15:08:44 +00:00
phrasendrescher phrasendrescher: 1.0 -> 1.2.2c (#46215) 2019-05-05 22:55:11 +02:00
pinentry pinentry: update patch url 2019-05-04 00:20:54 +02:00
pius Merge pull request #57366 from r-ryantm/auto-update/pius 2019-03-14 07:41:32 -07:00
polkit-gnome treewide: Update meta of packages hosted on gnome 2019-05-13 03:01:25 -04:00
prey treewide: Change URLs to HTTPS 2019-04-22 10:19:54 +02:00
proxmark3 proxmark3: init at 3.1.0 2019-04-06 15:00:18 +02:00
pwgen
qdigidoc [treewide] delete unused patches 2019-05-04 19:52:24 +02:00
qesteidutil treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
radamsa radamsa: 0.5 -> 0.6 2019-06-04 15:28:15 -05:00
rarcrack
rhash rhash: run functional tests not consistency of source dist :) 2019-02-04 01:49:02 -06:00
rng-tools rng-tools: fix missing opensc reference 2019-04-26 15:55:37 +08:00
saml2aws Replace platforms.linux with platforms.darwin for expressions that compile on darwin too (too restrictive platforms) 2019-02-18 10:56:58 +01:00
sbsigntool treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
scallion
scrypt
seccure seccure: add license 2018-08-04 18:42:30 +02:00
secp256k1
sedutil
sha1collisiondetection
shc shc: 4.0.1 -> 4.0.2 2019-06-02 20:37:13 -07:00
signify signify: 24 -> 25 2019-05-12 21:32:52 -07:00
signing-party switch users of "gnupg1" to plain "gnupg" 2019-05-12 20:08:50 +02:00
simple-tpm-pk11
softhsm softhsm: 2.4.0 -> 2.5.0 2018-10-03 02:14:57 -07:00
sops sops: 3.3.0 -> 3.3.1 2019-06-12 09:17:45 +02:00
spectre-meltdown-checker spectre-meltdown-checker: 0.41 -> 0.42 2019-05-27 15:46:23 +02:00
srm
ssdeep ssdeep: 2.13 -> 2.14.1 (#45114) 2018-08-16 21:45:52 +02:00
ssh-audit ssh-audit: init at 1.7.0 2019-05-02 04:35:06 +09:00
sshguard [treewide] delete unused patches 2019-05-04 19:52:24 +02:00
sshuttle treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
sslscan sslscan: 1.11.12 -> 1.11.13 2019-04-02 12:02:40 +02:00
ssss ssss: add license 2018-08-04 17:00:58 +02:00
steghide
stoken
stricat
su-exec
sudo sudo: 1.8.26 -> 1.8.27 2019-01-13 17:38:40 -06:00
sudolikeaboss
super super: get patch from salsa.debian.org 2018-11-25 00:35:26 +01:00
tboot tboot: 1.9.6 -> 1.9.8 2019-05-13 21:47:47 +02:00
tcpcrypt treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
thc-hydra
theharvester theharvester: 2.7.1 -> 3.0.6 2019-05-20 20:49:37 +02:00
tor tor: 0.3.5.7 -> 0.4.0.5 2019-05-03 02:02:31 -05:00
tpm-luks
tpm-quote-tools
tpm-tools
tpm2-tools treewide: remove unused variables (#63177) 2019-06-16 19:59:05 +00:00
trousers
trufflehog trufflehog: 2.0.91 -> 2.0.97 2018-10-25 23:54:28 -07:00
vault vault: 1.1.2 -> 1.1.3 2019-06-18 09:24:55 -07:00
volatility
vulnix vulnix: 1.8.1 -> 1.8.2 2019-06-17 10:57:35 +02:00
wipe
wpscan wpscan: 3.4.3 -> 3.5.3, use bundlerApp 2019-05-04 21:55:52 +02:00
yara yara: 3.9.0 -> 3.10.0 2019-05-13 06:00:16 -07:00
zmap zmap: init at 2.1.1 2019-05-10 07:50:25 +02:00
zzuf zzuf: init at 0.15 2019-04-01 15:43:32 +07:00
default.nix ecdsatool: init at 0.0.1 2019-03-18 14:26:24 -05:00